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7/4/1 (item 1 from file: 350) 

DIALOG(R) Fi 1 e 350:Derwent WPIX 

Cc) 2005 Thomson Derwent. All rts. reserv. 

IM- *lmage available* 
AA- 2003-417328/2003391 
XR- <XRPX> N03-332741| 

Ti- Digital content license acquisition method in internet based 
multi-media distribution, involves allowing user to communicate with 
license server by way of browser hosted by rendering application 
to acquire license! 

PA- GANESAN K (GANE-l) ; MCKUNE 3 R (MCKU-I) ; MOHAMMED S B (MOHA-l) ; OLSON K 

y (olso-i) | 

AU- <INVENTORS> GANESAN K; MCKUNE 3 R; MOHAMMED S B; OLSON K J| 
NC- 001| 
NP- 001| 

PN- US 20030028488 Al 20030206 US 2001817167 A 20010326 200339 B| 
AN- <LOCAL> US 2001817167 A 20010326 | 
AN- <PR> US 2001817167 A 20010326 | 
LA- US 20030028488(39)1 
AB- <PN> US 20030028488 Al| 

ab- <nv> novelty - A rendering application (34) on a computing device 
(14) hosts browser and causes the browser to navigate the license 
server . a user is allowed to communicate with the license server 
by way of the hosted browser to acquire the license. The hosted browser 
is shutdown upon receiving the license by hosting rendering 
application. | 

ab- <BASIC> detailed description - independent claims are al so included for 
the following: 

(1) computer readable medium storing digital content license 
acqui si ti on p rog ram ; 

(2) computing device; 

(3) method of rendering application on computing device; and 

(4) computer readable medium storing rendering application 
program. 

USE - For acquiring license related to multi -media in internet 
based multi -media distribution. 

advantage - Prevents unauthorized copying of digital content by 
performing effective authentication. 

description OF drawing (S) - The figure shows the block diagram of 
user's computing device. 

computing device (14) 
rendering application (34) 

pp; 39 DwgNo 4/14 | 

DE- <TITLE TERMS> DIGITAL; CONTENT; LICENCE; ACQUIRE; METHOD; BASED; MULTI; 

MEDIUM; DISTRIBUTE; ALLOW; USER; COMMUNICATE; LICENCE; SERVE; WAY; 

RENDER ; APPLY; ACQUIRE; LICENCE | 
DC- T01| 

IC- <MAIN> G06F-017/60I 

IC- <ADDITIONAL> H04K-001/00; H04L-009/00| 
MC- <EPI> T01-N01D1; T01-N02B1A; T01-S03| 
FS- EPI| | 
? 
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? t8/4/all 

8/4/1 (Item 1 from file: 350) 
DIALOG (R) Fi 1 e 350:Derwent WPIX 
(c) 2005 Thomson Derwent. All rts. reserv. 

im- *image available* 
AA- 2001-210824/2001211 

DX- <RELATED> 2000-611744; 2000-647267; 2000-647268; 2001-090815; 

2001-191170; 2001-210825; 2001-496746; 2001-522158; 2001-522159; 

2001-596328; 2001-596397; 2002-279866; 2002-350656; 2002-392575; 

2003-522656; 2005-6172521 
XR- <XRPX> N01-150657I 

TI- Digital content package applicable for access to digital content 
has license acquisition information including location of digital 
license provider, and package ID for identifying digital content and 
package | 

PA- MICROSOFT CORP (MICT ) | 

AU- <INVENTORS> ABBURI R; BELL 3 R C; BLINN A N; JONES T C; PEINADO M| 
NC- 089| 
NP- 002| 

PN- WO 200058810 A2 20001005 WO 2000US4972 A 20000225 200121 B| 

PN- AU 200037087 A 20001016 AU 200037087 A 20000225 2001211 

AN- <LOCAL> WO 2000US4972 A 20000225; AU 200037087 A 200002251 

AN- <PR> US 2000482843 A 20000113; US 99126614 P 19990327; US 99290363 A 

19990412 | 
FD- WO 200058810 A2 G06F-001/00 

<DS> (National): AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CR CU CZ DE 
DK DM EE ES FI GB GD GE GH GM HR HU ID IL IN IS J P KE KG KP KR KZ LC LK 
LR LS LT LU LV MA MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL 
T3 TM TR TT TZ UA UG UZ VN YU ZA ZW 

<DS> (Regional): AT BE CH CY DE DK EA ES FI FR GB GH GM GR IE IT KE LS 

LU MC MW NL OA PT SD SE SL SZ TZ UG ZW 
FD- AU 200037087 A Based on patent WO 2000588101 

LA- WO 200058810(E<PG> 76) | 

DS- <NATIONAL> AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CR CU CZ DE DK DM 
EE ES FI GB GD GE GH GM HR HU ID IL IN IS 3P KE KG KP KR KZ LC LK LR LS 
LT LU LV MA MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL T3 TM 
TR TT TZ UA UG UZ VN YU ZA ZW| 

DS- <REGlONAL> AT; BE; CH ; CY; DE; DK; EA; ES; FI; FR; GB; GH; GM; GR; IE; 

IT; KE; LS; LU; MC; MW; NL; OA; PT; SD; SE; SL; SZ; TZ; UG; ZW| 
AB- <PN> WO 200058810 A2| 

ab- <nv> novelty - The encrypted digital content to be rendered according 
to a digital license apart from a package, can be decrypted based on a 
decryption key obtained from the digital license . a package 
identification is used for identification of one of the digital content 
and the package. The location of a license provider that provides the 
digital license , is included in a license acquisition 
information. | 

AB- <BASIC> DETAILED DESCRIPTION - INDEPENDENT CLAIMS are al SO included for 

the following: 

(a) a computer- readable medium which stores a data structure 
corresponding to digital content package; 

(b) and a data structure. 

USE - Applicable for access to digital content e.g. digital audio, 
digital video, digital text, digital data, digital multimedia to be 
distributed to a user. 

advantage - A digital rights management (DRM) system either directs 
the user to a license server to ootain a license to render the 
digital content or transparently obtains license from license 
server without necessary action on the part of the user. Enables 
flexible and definable control of rendering or playing of arbitrary 
forms of digital content to content owner of digital content through 
enforcement architecture. 

DESCRIPTION OF DRAWING (s) - The figure shows the block diagram of 
the authoring tool of the architecture of digital content package. 

pp; 76 DwgNo 3/12 | 

DE- <TITLE TERMS> DIGITAL; CONTENT; PACKAGE; APPLY; ACCESS; DIGITAL; 
CONTENT; LICENCE; ACQUIRE; INFORMATION; LOCATE; DIGITAL; LICENCE; 
PACKAGE; ID; IDENTIFY; DIGITAL; CONTENT; PACKAGE | 

DC- T01; w02| 

IC- <MAIN> G06F-001/00I 
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MC- <EPI> T01-D01; T01-J12C; T01-S03; W02-F05A; W02-F10I 
FS- EPI| | 



8/4/2 Citem 1 from file: 347) 

FN- DIALOG (R) File 347:JAPI0| 

CZ- (c) 2005 JPO & JAPio. All rts. reserv.l 

TI- METHOD FOR OBTAINING DIGITAL LICENSE CORRESPONDING TO DIGITAL 
CONTENT 

PN- 2004-046856 -JP 2004046856 A- 
PD- February 12, 2004 (20040212) 

AU- BOURNE STEVEN; MALIK PRASHANT; KRISHNASWAMY VI NAY; SHOBE JAMES B JR; 

VENKATESH CHANDRAMOULI ; NARIN ATTILLA 
PA- MICROSOFT CORP 
AN- 2003-183596 -JP 2003183596- 
AN- 2003-183596 -JP 2003183596- 
AD- June 26, 2003 (20030626) 

PR- 02 185527 [US 2002185527], US (United States of America), June 28, 

2002 (20020628) 
G06F-012/14; H04L-009/08; H04L-009/32 

AB- PROBLEM TO BE SOLVED: To encrypt contents in accordance with a 

contents key (CK) (CK(content)) , to protect the (CK) in accordance 
with a public key (pu-drm) of a license server , and to protect 
right data related to the contents in accordance with 
(PU-frm). SOLUTION: Protected items are presented to the license 
server as a right label in order to receive a signature by the 
license server . The license server inspects whether the right 
label is valid or not, digitally signs based on the protected right 
data when the right label is valid, obtains, in result the signed 
right label (SRL), and, then, returns the right label. The SRL is 
connected to (CK(content)) , both of which are distributed to a user. 
The user submits the SRL to the license server to request a 
license in order to render the contents, copyright: (C)2004,jpo 

? 



05-Nov-05 



2 



09: 50 AM 



Ginger R. DeMille 

? tlO/3,k/all 

10/3, K/l (Item 1 from file: 350) 

dialog(R) Fi 1 e 350:Derwent WPIX 

(c) 2005 Thomson Derwent. All rts. reserv. 

017293623 **lmage available** 
WPI Acc No: 2005-617252/200563 

Related WPI acc No: 2000-611744; 2000-647267; 2000-647268; 2001-090815; 
2001-191170; 2001-210824; 2001-210825; 2001-496746; 2001-522158; 
2001-522159; 2001-596328; 2001-596397; 2002-279866; 2002-392575; 
2003-522656 

XRPX Acc No: N05-506645 

interdependent validation method for protecting digital data content in 
digital rights management system, involves using private key that 
validates digital signatures of digital content package and license 

Patent Assignee: MICROSOFT CORP (MICT \) 

inventor: blinn a n; jones t c 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent no Kind Date Applicat No Kind Date week 
US 20050192907 Al 20050901 US 99126614 P 19990327 200563 B 

US 99290363 A 19990412 
US 2000482928 A 20000113 
US 2005117590 A 20050428 

Priority Applications (No Type Date): US 99126614 P 19990327; US 99290363 A 

19990412; US 2000482928 A 20000113; US 2005117590 A 20050428 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 20050192907 Al 34 G06F-017/60 Provisional application US 99126614 

. . cont of application US 99290363 

Div ex application US 2000482928 

Abstract (Basic): 

A private key is derived from the previous private key in order 
to validate another digital signature obtainedO from the license . 

package having a portion of digital content in encrypted form 
with corresponding digital license for rendering the digital content 



10/3 ,K/2 (Item 2 from file: 350) 

DIALOG(R) Fi 1 e 350: Derwent WPIX 

(c) 2005 Thomson Derwent. All rts. reserv. 

016906864 **lmage available** 

WPI Acc no: 2005-231152/200524 

Related WPI Acc no: 2005-150687 

XRPX Acc No: N05-190297 

Electronic mail reception method in e.g. personal computer, involves 
obtaining license for copyright protected content of electronic 
mail, such that license is available to recipient even when recipient is 
not connected to server 

Patent Assignee: antonoff l (anto-i); brown k (brow-i) ; cahill j (cahi-i); 

DEMELLO M A (DEME-I) ; GRAHAM C (GRAH-I) ; GRAY R E (GRAY- I ) 
inventor: ANTONOFF L; BROWN K; CAHILL 3; DEMELLO M A; GRAHAM C; GRAY R E 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent no Kind Date Applicat no Kind Date week 

US 20050038750 Al 20050217 US 2003607896 A 20030627 200524 B 

Priority Applications (no Type Date): US 2003607896 A 20030627 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 20050038750 Al 37 G06F-015/16 

Electronic mail reception method in e.g. personal computer, involves 
obtaining license for copyright protected content of electronic 
mail, such that license is available to recipient even when recipient is 
not connected to. . . 
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Abstract (Basic): 

Ensures controlled rendering of arbitrary forms of digital 
content, to the user... 

...The figure shows a flow diagram explaining the RM protection mail 
renderi ng process ... 

10/3 ,K/3 (Item 3 from file: 350) 

DIALOG(r) Fi 1 e 350:Derwent WPIX 

(c) 2005 Thomson Derwent. All rts. reserv. 

016477691 **lmage available** 

WPI Acc No: 2004-635634/200461 

XRPX Acc No: N04-502358 

Application service provider service execution method involves executing 
specific parameter for image processing by OCX component and uploading 
multi-resolution image obtained by image processing to server using OCX 
component 

Patent Assignee: VR PHOTO CO LTD (VRPH-N); VR PHOTO 3H (VRPH-N) ; KWAK 3 

(KWAK-I) 
inventor: KWAK 3 S; KWAK 3 

Number of Countries: 108 Number of Patents: 003 
Patent Family: 

Patent no Kind Date Applicat no Kind Date week 
WO 200475072 Al 20040902 WO 2004KR333 A 20040219 200461 B 
3P 2004252992 A 20040909 JP 200466333 A 20040209 200461 
KR 436667 B 20040622 KR 200310849 A 20030220 200470 

Priority Applications (No Type Date): KR 200310849 A 20030220 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 200475072 Al E 70 G06F-017/00 

Designated states (National): ae AG al am at au az ba bb bg br bw by bz 

CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID 

IL IN IS KE KG KP KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI 

NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY J3 TM TN TR TT TZ UA UG 
US UZ VC VN YU ZA ZM ZW 

Designated States (Regional): AT BE BG BW CH CY CZ DE DK EA EE ES FI FR 

GB GH GM GR HU IE IT KE LS LU MC MW MZ NL OA PT RO SD SE SI SK SL SZ TR 

TZ UG ZM ZW 

DP 2004252992 A 30 G06F-013/00 

KR 436667 B ' G06F-017/00 

Application service provider service execution method involves executing 
specific parameter for image processing by OCX component and uploading 
multi-resolution image obtained by image processing to server using ocx 
component 

Abstract (Basic): 

Relevant parameter for image processing are executed in an 
object linkinq-embedding control extension ( OCX ) component (28) 
included in the image production program. The divided 
multi-resolution image obtained by image processing and image data 
replacement data are saved by executing the OCX component. The 
processed image is uploaded to the designated server by using OCX 
component. 

Enables ordinary unskilled user to produce multi -resolution 
image . Blocks illegal usage of image manufacture solution and clears 
settlement of account between ASP service... 



10/3, K/4 (Item 4 from file: 350) 
dialog(R) Fi 1 e 350: Derwent WPIX 
(c) 2005 Thomson Derwent. All rts. reserv. 

016349928 **lmage available** 

WPI Acc No: 2004-507831/200449 

XRPX Acc no: N04-401510 

Automated identification recording system for issuing gate pass in e.g. 
club, extracts personal textual and image information from temporary 
image digital image obtained by scanning driving license and prints 
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ti cket , acco rdi ngl y 

patent Assignee: Griffiths r (grif-i); stanton m (stan-i) 
inventor: GRIFFITHS R A; STANTON M R 
Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat no Kind Date week 

AU 2002301647 Bl 20030724 AU 2002301647 A 20021025 200449 B 

priority Applications (no Type Date): AU 2002301647 A 20021025 
Patent Details: 

Patent no Kind Lan Pg Main IPC Filing Notes 
AU 2002301647 Bl 23 G06F-007/12 

... gate pass in e.g. club, extracts personal textual and image 
information from temporary image digital image obtained by scanning 
driving license and prints ticket, accordingly 

Abstract (Basic): 

An optical scanner (21) scans personal identification card (22) 
e.g. driving license to generate a temporary digital image (23). A 
processing system (10) extracts personal textual data e.g. license 
holder's name. . . 



10/3, K/5 (Item 5 from file: 350) 
DIALOG (R) Fi 1 e 350:Derwent WPIX 
(c) 2005 Thomson Derwent. All rts. reserv. 

015962773 **lmage available** 

WPI Acc No: 2004-120614/200412 

XRPX Acc No: N04-096497 

Digital content rendering method e.g. for digital audio, involves 
applying encryption/decryption key to digital content of storage medium, 
to expose corresponding content 

Patent Assignee: MICROSOFT CORP (MICT ) 

inventor: GANESAN K; HELIN 3 F; STROM C P 

Number of Countries: 034 Number of Patents: 004 

Patent Family: 

Patent No Kind Date Applicat No Kind Date week 
US 20040003267 Al 20040101 US 2002183933 A 20020626 200412 B 
EP 1376303 A2 20040102 EP 200313279 A 20030612 200412 
NO 200302748 A 20031229 NO 20032748 A 20030617 200412 
JP 2004048749 A 20040212 JP 2003183594 A 20030626 200413 

Priority Applications (No Type Date): US 2002183933 A 20020626 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20040003267 Al 26 H04L-009/00 
EP 1376303 A2 E G06F-001/00 

Designated states (Regional): al at be bg ch cy cz de dk EE es fi fr gb 

GR HU IE IT LI LT LU LV MC MK NL PT RO SE SI SK TR 
NO 200302748 A H04L-009/32 
IP 2004048749 A 34 H04L-009/14 

Digital content rendering method e.g. for digital audio, involves 
applying encryption/decryption key to digital content of... 

Abstract (Basic): 

For rendering digital content such as digital audio, digital 
video, digital text, digital data and digital multimedia... 

...Efficiently allows the access of encrypted digital content in 

accordance with license rights acquired by user... 
...Title Terms: RENDER ; 



10/3, K/6 (Item 6 from file: 350) 
DIALOG (R) Fi 1 e 350: Derwent WPIX 
(c) 2005 Thomson Derwent. All rts. reserv. 

014459163 **lmage available** 
WPI Acc No: 2002-279866/200232 
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Related WPI Acc No: 2000-611744; 2000-647267; 2000-647268; 2001-090815; 

2001-191170; 2001-210824; 2001-210825; 2001-496746; 2001-522158; 

2001-522159; 2001-596328; 2001-596397; 2002-350656; 2002-392575; 

2003-522656; 2005-617252 
XRPX Acc No: N02-218525 

Digital content rendering method for digital right management and 

enforcement, involves rendering encrypted content on portable device, 

by decrypting encrypted content key with private key 
patent Assignee: microsoft corp (mict ) 
inventor: peinado m 

Number of Countries: 028 Number of Patents: 003 
Patent Family: 

Patent No Kind Date Applicat No Kind Date week 

US 20020013772 Al 20020131 US 99126614 P 19990327 200232 B 

US 2001892371 A 20010627 
EP 1271279 A2 20030102 EP 200211478 A 20020524 200310 
JP 2003101526 A 20030404 JP 2002186967 A 20020626 200332 

Priority Applications (no Type Date): US 99126614 P 19990327; US 2001892371 

A 20010627 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 20020013772 Al 44 H04L-009/00 Provisional application US 99126614 

EP 1271279 A2 E G06F-001/00 

Designated states (Regional): al at be ch cy de dk es fi fr gb gr ie it 

LI LT LU LV MC MK NL PT RO SE SI TR 
DP 2003101526 A 46 H04L-009/08 

Digital content rendering method for digitaV right management and 
enforcement, involves rendering encrypted content on portable device, 
by decrypting encrypted content key with private key 

Abstract (Basic): 

The content key (kd) obtained from the digital license , is 
encrypted according to public key (PUl) of the portable device. The 
sub-license is. 

...device decrypts encrypted content key with private key (PRl) and 

produces a content key, and renders the encrypted content on portable 
device using the produced content key. 

For rendering digital contents such as digital audio, video, 
text, data and multimedia, for digital rights management... 

...Allows the controlled rendering or playing of arbitrary forms of 
digital content where such control is flexible and definable by the 
user of the digital content. Renders digital content only as 
specified by the content user, even though the digital content is to be 

rendered on a portable device which is not under the control of 
content user. . . 
.Title Terms: RENDER ; 



10/3, K/7 (Item 7 from file: 350) 
DIALOG(R) Fi 1 e 350:Derwent WPIX 
CO 2005 Thomson Derwent. All rts. reserv. 

014112116 **image available** 
WPI Acc No: 2001-596328/200167 

Related WPI Acc No: 2000-611744; 2000-647267; 2000-647268; 2001-090815; 

2001-191170; 2001-210824; 2001-210825; 2001-496746; 2001-522158; 

2001-522159; 2001-596397; 2002-279866; 2002-350656; 2002-392575; 

2003t522656; 2005-617252 
XRPX Acc No: N01-444564 

Encrypting a digital object based on key ID selected for the digital 

object, using selected key ID as input to a selected function output of 

which is used as key for the digital object 
Patent Assignee: MICROSOFT CORP (MICT ) 
inventor: peinado M ; venkatesan r 
Number of Countries: 092 Number of Patents: 005 
Patent Family: 

Patent No Kind Date Applicat No Kind Date week 
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Abstract (Basic): 

enforcement architecture allows access to encrypted digital 
content only in accordance with parameters specified by license 
rights acquired by user of the digital content, such as digital 
audio, digital video, digital text, digital data, and digital 
multimedia for. . . 

...specify license rules that must be satisfied before such digital content 
is allowed to be rendered e.g. on user's computing device... 
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... digital content, has license evaluator that determines if 
corresponding stored license enables requesting user to render 
requested digital content 

Abstract (Basic): 

38) determines if a corresponding license in the license store 
enables the requesting user to render requested digital content in 
the manner sought based on reviewed license rules. A state store... 

Allows access to encrypted digital content in accordance to 
specified parameters by license rights acquired by a user of the 
digital content. Allows owner of digital content to specify license 
rules that must be satisfied before digital content is allowed to be 
rendered on user's computer. Can be used in other computer system 
configurations e.g. handheld... 

...Title Terms: RENDER ; 
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Digital license obtaining method involves checking validity of 
license request, negotiating terms and conditions between license 
requestor and provider, and generating and issuing request 

Abstract (Basic): / 

Allows controlled rendering or playing of arbitrary forms of 
digital content, where control is flexible and definable by content 
owner of digital content. Provides controlled rendering environment 
on computing device e.g. personal computer, where rendering 
environment includes at least a portion of enforcement architecture, 
thus allowing digital content to be rendered as specified by content 
owner even though digital content is to be rendered on computing 
device that is not under control of content owner. Provides trusted 
software component... 
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Digital content in encrypted rights protected form rendering , involves 
locating digital content of selected license and obtaining 
decryption key for decrypting digital contents using digital rights 
management system 

Abstract (Basic): 

A rendering application determines whether the digital content 
is in an encrypted right protected form and invokes... 

...a digital content piece and has a digital content decryption key (KD) . 
drm system locates digital content of selected license and obtains 
the relevant kd for decrypting the digital contents. 

Used in rendering digital contents like digital audio, digital 
video, digital text , digital multimedia, in encrypted right protected 
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08140232 **image available** 

METHOD AND EQUIPMENT OF ASP SERVICE FOR MULTI-RESOLUTION IMAGE ON 
ENVIRONMENT OF MULTI-WEB SERVER 

PUB. NO.: 2004-252992 [JP 2004252992 A] 

PUBLISHED: September 09, 2004 (20040909) 

INVENTOR(S) : KAKU TEIKOKU 

APPLICANT(S) : VR PHOTO CO LTD 

APPL. NO.: 2004-066333 [JP 200466333] 

FILED: February 09, 2004 (20040209) 

PRIORITY: 03 200310849 [KR 200310849], KR (Korea) Republic of, February 
20, 2003 (20030220) 

ABSTRACT 

...To provide an accurate preference research method which consistently 
performs processing of all processes of producing multi-resolution 
images so as to enable anybody, even a general user who doesn't have 
expert knowledge... 

... and allows the images to be browsed by Internet users and prevents 
illegal use of image production solutions and provides a transparent 
price paying method between an ASP developer and an ASP... 

...company and takes only the specific area of commodities as the object. 

SOLUTION: Multi- resolution images are produced while mutually 
transmitting parameters between application parts (15, 18, and 27) and an 
OCX component part (28) and are uploaded to the server and are carried on 
the web. . . 

...images. This processing is executed by authentication for the purpose of 
preventing illegal use of OCX components, and use details are recorded to 
make price payment transparent. 

COPYRIGHT : (C) 2004 , 3 PO . . . 
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METHOD FOR BINDING DIGITAL LICENSE TO PORTABLE DEVICE AND FOR CHECKING OUT 
OR CHECKING IN DIGITAL LICENSE FROM OR TO PORTABLE DEVICE IN DIGITIZED 
RIGHT MANAGEMENT (DRM) SYSTEM 

PUB. NO.: 2003-101526 [JP 2003101526 A] 

PUBLISHED: April 04, 2003 (20030404) 

INVENTOR(S) : PEINADO MARCUS 

APPLICANT(S) : MICROSOFT CORP 

APPL. NO.: 2002-186967 [JP 2002186967] 

FILED: June 26, 2002 (20020626) 

PRIORITY: 01 892371 [US 2001892371], US (United States of America), 
June 27, 2001 (20010627) 

ABSTRACT 

... for enhancing digital license right in order to prevent illegal 
conducts. 

SOLUTION: in order to render a digital contents encrypted according to a 
contents key (kd) on a first device having a public key (PUl) and a 
corresponding private key (PRl) , a digital license corresponding to the 
contents is acquired . The digital license houses the contents key 
(KD) in an encrypted form. The encrypted contents key (KD) from... 
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07542317 **lmage available** 

DIGITAL CONTENT PROVIDING SYSTEM AND METHOD, SERVER DEVICE AND DIGITAL 
CONTENT PROVIDING PROGRAM 

PUB. NO.: 2003-036157 [JP 2003036157 A] 
PUBLISHED: February 07, 2003 (20030207) 

INVENTOR(s): HIRABAYASHI SHINJI 

APPLICANT(S) : SEIKO EPSON CORP 

APPL. NO.: 2002-129648 [DP 2002129648] 

Division of 2001-094735 [JP 200194735] 
FILED: March 29, 2001 (20010329) 

ABSTRACT 

...PC 2 and transmits this layout information file to the user PC 2. A 
printing OCX 54 in the user PC 2 creates the print image based on 
main picture data and layout information in the main picture container 42 
and. . . 
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07431636 **lmage available** 

DIGITAL CONTENTS PROVIDING SYSTEM, DIGITAL CONTENTS PROVIDING METHOD, 
SERVER UNIT AND DIGITAL CONTENTS PROVIDING PROGRAM 

PUB. NO.: 2002-300146 [JP 2002300146 A] 

PUBLISHED: October 11, 2002 (20021011) 

INVENTOR(s): HIRABAYASHI SHINJI 

APPLICANT(s) : SEIKO EPSON CORP 

APPL. NO.: 2001-094735 [DP 200194735] 

FILED: March 29, 2001 (20010329) 

ABSTRACT 

...PC 2, and transmits the layout information file to the user PC 2. A 
print OCX 54 in the user PC 2 generates a print image on the basis of 
the main image data in the main image container 42 and... 



10/3.K/15 (Item 1 from file: 2) 

DIALOG (R) Fi 1 e 2 : INSPEC 

(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

07780576 INSPEC Abstract Number: B2001-01-6210L-070, C2001-01-3360J-017 
Title: Network communication in distributed marine simulation system 
Author(s): Yin Yong; Jin Yi -Cheng; Li Zhi-Hua 

Author Affiliation: Nautical Sci . & Technol . Inst., Dalian Maritime 
Univ. , China 

Journal: Journal of System Simulation vol.12, no. 6 p. 621-4 
Publisher: Editorial committee of J. Systems Simulation, 
Publication Date: Nov. 2000 Country of Publication: China 
ISSN: 1004-731X 

SICI : 1004-731X(200011) 12 : 6L . 621 : NCDM ; 1-U 
Material Identity Number: H448-2000-007 
Language: Chinese 
Subtile: B C 
Copyright 2000, IEE 

...Abstract: how to implement the high speed communication of the system 
adopting udp protocol and winsock OCX control. The paper also introduces 
the synchronous technology and dr algorithm used in the 3d scene rendering 
computers in details. 

...Descriptors: rendering (computer graphics) 

...Identifiers: winsock OCX control... 
...3d scene rendering 
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10/3.K/16 (Item 1 from file: 99) 

DlALOG(R)File 99:wilson Appl . Sci & Tech Abs 
(c) 2005 The hw Wilson Co. All rts. reserv. 

2063719 H.W. WILSON RECORD NUMBER: BAST00016613 

The two competitive photodissociation channels in cyano carbonyls (NCC(O)x, 
x = CH3, ch(ch3)2, C(CH3)3, 0CH3) at 193 nm. A study by photof ragment 
translational energy spectroscopy 

Furl an, Alan; Scheld, Heiner A; Huber,. J. Robert 

The Dournal of Physical Chemistry A v. 104 no9 (Mar. 9 2000) p. 1920-9 
DOCUMENT TYPE: Feature Article ISSN: 1089-5639 

...ABSTRACT: kinetic energy distributions were measured and the two 
radical decay channels, NCC(0)x --> cn + OCX and NCC(0)x --> OCCN + x, 
were identified. Dissociation leading to CN + OCX is the main decay path 
([similar] 85%) for acetyl cyanide (X = methyl), but is the... 

...X = isopropyl (30%), X = tert-butyl (17%), and X = methoxy (<5%) . The 
primary fragments CN + OCX were found to be stable with respect to 
secondary dissociation in all cases, except for... 

...the four compounds proved methyl cyanoformate to be the most favorable 
species for an efficient photolytical production of stable OCCN 
radicals, whereas acetyl cyanide is the most efficient source of CN 
radicals. . . 



10/3, K/17 (Item 1 from file: 256) 
dialog(r) Fi 1 e 256:Tecinfosource 
(c) 2005 info. sources inc. All rts. reserv. 

02645001 DOCUMENT TYPE: Company 

HexaTech (645001) 

725 Mariposa Ave #107 

Mountain view, CA 94041 united States 

TELEPHONE: (650) 254-0610 

FAX: (650) 965-1645 

homepage : http : //www. hexat ech . com 

EMAIL : i nf o@hexatech . com 

RECORD type: Directory 

contact: Sales Department 

STATUS: Active 

SALES: NA 

DATE FOUNDED: 1995 

PERSONNEL: Lu , Dohn, General Manager 

REVISION DATE: 20030630 

...was founded in 1995 with the mission to build and provide innovative and 
quality ActiveX/ OCX controls at a very affordable price. The company 
specializes in developing component software and windows graphics 
products . 
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01645443 DOCUMENT TYPE: Product 

PRODUCT NAME: Catalyst SocketTools 3.6 (645443) 

Catalyst Development Corp (625833) 
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RECORD TYPE: Directory 
CONTACT: Sales Department 
REVISION DATE: 20020930 

...existing applications. It provides the tools in the form of VBX and 
16/32 bit OCX custom controls, all inclusive in the one package. These 
components can be used by visual... 

...Internet or intranet e-mail directly into existing applications. The 
WebBrowser control, along with an image rendering component, allows 
developers to integrate the web into any existing or new application with 
HTML2.0 and some. . . 
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04879049 JICST ACCESSION NUMBER: 01A0116789 FILE SEGMENT: JICST-E 

Development of an image Analyzing system of the Headache Diary for 
Quantitative Analysis of the Headache. 

TAKEUCHI AKIHIRO CD I IKEDA NORIAKI (1); DOBASHI KAORI (2); SHIMASAWA 

CHIKAE (2); IGARASHI HISAKA (2); SAKAI FUMIHIKO (2); SHIRATAKA MASUO 
(3) 

(1) Kitasato Univ. School of Allied Health Sci . ; (2) Kitasato Univ., Hosp. 
; (3) Kitasato Univ., sch. of Med. 

iryo Johogaku(Japan Journal of Medical informatics), 2000, VOL.20,N0.4, 

PAGE. 319-326, FIG. 6, TBL.l, REF.7 
JOURNAL NUMBER: Y0510AAE ISSN NO: 0289-8055 
UNIVERSAL DECIMAL CLASSIFICATION: 616,8-07 

language: Japanese country of publication: Japan 

document type: Journal 
article type: original paper 
MEDIA type: Printed Publication 

Development of an image Analyzing System of the Headache Diary for 

Quantitative Analysis of the Headache. 
...abstract: and is consisted of an Active x control and an html file. The 
control (TKS. ocx (100 kB) , developed by using Microsoft VC++6.0) 
takes a job of an image... 
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Development of image applications by ocx . More free imageprocessing. 

TAMAI TAKAO (1) 

(1) Aivsupekku 

Gazo Rabo, 1999, VOL. 10, NO. 3, PAGE. 50-58, FIG. 12, TBL.3 
JOURNAL NUMBER: L2340AAI ISSN NO: 0915-6755 
UNIVERSAL DECIMAL CLASSIFICATION: 681.3:621.397.3 

LANGUAGE: Japanese COUNTRY OF publication: Japan 

DOCUMENT TYPE: Journal 

ARTICLE TYPE: Commentary 

media type: Printed Publication 

Development of image applications by ocx . More free imageprocessing. 

...ABSTRACT: Excel . The imageprocessing software satisfying these 

conditions "IO" is presentedwhich is a development tool on OCX of 
windows for imageprocessing applications. Some real examples for image 
analysisare presented. 
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windows-DOS Developer's Journal, v6,/ n9, p79(l) 
Sep, 1995 

document type: Brief Article Product Announcement ISSN: 1059-2407 

language: English record type: Full text 

WORD COUNT: 86 LINE COUNT: 00010 

TEXT: 

...for windows components. Products are organized by components type, 
file format, and vendor, and cover OCX , vbx dli, and Delphi custom 
controls. After you locate a control of interest, you can access text 
descriptions, product images , and downfoadable demos. 
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May 15, 1995 

DOCUMENT TYPE: Buyers Guide ISSN: 1041-5173 LANGUAGE: English 

record type: Full text; Abstract 

WORD COUNT: 45154 LINE COUNT: 03869 

free disk space. Compatible with uniData, universe, Pick, Prime 
information, and other applications. Single-user license : $195; server 
licenses are also available, 10 users: $1700, 25 users: $4000, 50 users: 
$7500, 100 users: $14. . . Jacobson. Allows real-time problems to be 
partitioned into smaller pieces and then modeled by creating a graphic 
presentation of tasks, flows, processes, states, events, and actions. The 
tools communicate with one another... on Sun SPARC, Sun OS, IBM RS/6000, and 
hp 9000 platforms. $4595 per SQL Server license ; multiple- server 
license discounts are available. Reader service #698. 
DataTools-BackTrack for oracle 

DataTools inc., Menlo Park, CA...of resources. Analysis includes 
region occupancy, alerts when a dependent region is swapped out, IMS 
shutdown in progress, stopped OLDS, online change in progress, and so on. 
Resource and contention analysis. . .such as scanners and digital cameras 
directly into FoxPro for windows. Additional features include Graphic 
image command Set for developers customization and complete user 
interface. $189. Reader service #775. 

Espia Graphs & Tools for FoxPro for... 

...16 million colors, and recording and playing sound in the .wav format 
(windows version only), creates pictures with a video digitizer or 
color scanner and scans documents with any black-and-white. . .from 
development standards. Each object requires PowerBuilder. $129 per 
developer; $950 for an unlimited single- server license . Reader service 
#825. 

PowerLock 4.0 

ServerLogic Corp., Bellevue, WA 

206-803-0378 

A security. . . 

...on these roles. Runs on any PowerBuilder-compatible platform (windows, 
Macintosh, and Unix), single-development server license : $1995; single 
production server license : $395; quantity discounts apply. Reader 
service #826. 

PowerObjects 

ServerLogic corp., Bellevue, WA 

206-803-0378. . .and Application utilities. Runs on any 
PowerBuilder-compatible platform (windows, Macintosh, and Unix), unlimited 
development server license : $895 per module or $1795 for all three 
modules; developer license: $395 per module or. . .databases, send 
Transact-SQL statements, and process their results. $249. Reader service 
#837. 

SQL-sombrero/ OCX for CT-Library 
sylvain Faust inc., Hull, Quebec, Canada 
819-778-5045; 800-567-9127... 
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...the OLE automation interface. 16- and 32-bit versions. $389. Reader 
service #839. 

SQL-Sombrero/ OCX for DB Library 

Sylvain Faust inc., Hull, Quebec, Canada 

819-778-5045; 800-567-9127... 

...interface classes. Can be combined with Light Lib images or Light Lib 
Business to let developers add images and graphs to their applications, 
includes source code. $329. Reader service #843. 

Tom Rettig's. . .packages to produce documents. Gives users control over 
page layout with publishing features such as graphics inclusion table 
generation , boxes and lines, automatic table of contents generation, lists 
of figures and tables cross-referencing, . .use of fonts, graphics, and 
screen colors, users can also stylize text, data, buttons, backgrounds, 
pictures , and graphics to create templates. Access to several 
databases, including AS/400 SQL, Gupta SQLBase Server, Oracle, Sybase SQL 
...options. Users can copy the results of a query to another windows 
application. An integrated graphics package allows the creation of 
charts from query results. As the user builds a query, the results can be 
...applications using Report Engine DLL, Runtime included at no charge. 
Features enhanced vbx and new OCX . Supports many PC database formats, 
including Access, dBASE , Paradox, FoxPro, and Excel. The Professional 
version. . .multiline captions; flexible text/image alignment; use of any 
icon, bitmap, metafile, or cursor to create the control; image scaling 
and automatic control sizing; programmable animation speed; fully runtime 
configurable; automatic 3d borders with... 
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Fort Point Partners Delivers strategic consulting, Deployment Support For 
HP'S OpenPix E-commerce web Site 

BUSINESS WIRE 

October 01, 1998 

JOURNAL CODE: WBWE LANGUAGE: English RECORD TYPE: FULLTEXT 
WORD COUNT: 505 

... product family. Under the program, Fort Point will deploy HP's 
OpenPix products as it develops and implements vivid, graphics 
-intensive e-commerce solutions for its clients. Regarded within HP's 
internet imaging Operation as... 

... OpenPix products and services. The solution provided by Fort Point 
includes integration with secure software download , physical fulfillment 
functions and electronic software license management . Fort Point 
developed the system architecture, integrated existing systems with new 
capabilities, and managed the... 
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pni Appoints New vice President of sales and Marketing 

PR NEWSWIRE 

March 30, 1998 8:48 

JOURNAL CODE: WPRW LANGUAGE: English RECORD TYPE: FULLTEXT 
WORD COUNT: 552 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

Publishers Depot (tm) web site (www.publishersdepot.com), an 
Internet store that allows professional publishers, graphic artists and 
web- developers to instantly search for, license and download stock 
photography and other digital content from more than 400,000 images. 
Caviston will be directly involved in growing the... 



05-Nov-05 



12 



10:11 AM 



Ginger R. DeMille 

16/3.K/33 (Item 1 from file: 636) 

DIALOG (r) Fi 1 e 636: Gale Group Newsletter db(tm) 
(c) 2005 The Gale Group. Al I rts. reserv. 

03914172 Supplier Number: 50125792 (USE FORMAT 7 FOR FULLTEXT) 
High-tech dental products proliferate in a changing market 
The BBI Newsletter, v21, n5, pN/A 
May 1, 1998 

Language: English Record Type: Full text 
Document Type: Newsletter; Trade 
word count: 2605 

capture card. Cygnus imaging markets the Cygnus-Ray2 system 
developed by Japan's Panasonic. 

dmd acquired an exclusive worldwide license to a digital x-ray 
imaging system being developed by Suni Imaging Microsystems (Mountain view, 
California). Suni, a private semiconductor company that specializes in 
system-on-a-chip CMOS and CMOS-CCD image sensor products , pioneered the 
development of the first film-sized image sensors produced for digital 
x-ray. . . 
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SNOWBOUND OFFERS CMYK RASTER IMAGING SUPPORT FOR PRE- PRESS 
Imaging Update, v8, nl2, pN/A 
Dec 1, 1997 

Language: English Record Type: Full text 
Document Type: Newsletter; Trade 
word Count: 341 

purposes. Common capabilities for image manipulation include view, 
zoom, rotate, and scroll through multi-page images . 

The product is available now for windows 95 and NT as a DLL or 
ActiveX/ OCX or as a Macintosh 68K or PPC LIB, windows 3.x, and UNIX. The 
price... 
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kodak: "I spy with my PC eye" — Kodak launches first digital video camera 

M2 Presswire, pN/A 

April 17, 1997 

Language: English Record Type: Full text 
Document Type: Newswire; Trade 
word Count: 1020 

users distort pictures in a number of fun ways. Distorted images 
can be saved for compositing in an image editing package, save the 
effect to apply to another image , or create a movie to use in 
multimedia presentations or play as a screen saver. 

OCX 32-bit control and documentation This feature easily enables 
users to add the DVC 300... 
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dataviews corporation: Dataviews provide interactive graphics over web 
using Netscape plug-ins and Java 

M2 Presswire, pN/A 
August 1, 1996 

Language: English Record Type: Full text 
Document Type: Newswire; Trade 
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word Count: 511 

knobs, buttons, toggles, etc), and a point-and-click editor which 
developers can use to create custom dynamic graphics . Dynamic graphics 
have been available to windows and Unix developers using DV-xpresso's OCX 
controls and x-widget versions for over a year. 
A standard Netscape plug-in is... 
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LOTUS: Lotus announces Lotus components 
M2 Presswire, pN/A 
Feb 21, 1996 

Language : Engl i sh Record Type : Ful 1 text 
Document Type: Newswire; Trade 
word Count: 1486 

... and diagram, file viewer, comment tool, project scheduler and 
spreadsheet, plus a collection of application development controls 
including button, picture , radio, check box, combo box, list box, slider, 
spinner, progress gauge, label, text box and outline. 

* Lotus Component Developer Toolkit provides Notes and OCX 
developers with the tools and specifications for creating Lotus components. 
The toolkit includes a set... 
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0894986 BW1261 

STOCKOB J ECTS benn : stockobjects names internet Stock Photo Library Pioneer 
Nathan Benn as CEO 

August 17, 1998 

Byline: Business Editors 

...and then chairman of the 
Board until January 1997. PNl's products help companies to acquire , 
manage, and license digital content on the internet. Companies using 
PNI products to manage images include Simon & Schuster, Paramount, 
MGM/Turner, and Ford Motor Company U.K. Eastman Kodak Company... 
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(c) 1999 Business wire . All rts. reserv. 

0571169 BW0333 

Business wire Recap 

April 01, 1996 

Byline: Editors 

...0; Brings Low-price Document-Imaging client Software To Enterprise 
Customers (BW0028 07:59) 

(KOFAX- IMAGE - PRODUCTS -2) CHICAGO- -Ko Fax Announces Major 
upgrade to KIPP imageControls visual Programming Toolkit; version 2.0 
adds 32-bit OCX support, form recognition and advanced (BW1036 07:59) 

(filenet/watermark) (file) costa mesa, calif .--FileNet and 
watermark Announce Innovative Products for Managing Image and Fax 
Documents in web Applications, and web-Based workflow (BW0031 08:00) 

(KOFAX-IMAGE. . . 
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1035914 NYWEB 

PR Newswi re web site Directory For December 18 

DATE: December 19, 1996 09:31 EST WORD COUNT: 2,397 

...Earnings to Exceed Market Expectations 

http : //www . i nnovexi nc . com 

Integral vision Announces visionBlox 32-Bit OCX Machine vision 
Software 

Renders Obsolete Traditional Programming Techniques 
http : //www . medar . com 

Data Processing Resources corporation to Acquire Dallas... 
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LOTUS ANNOUNCES LOTUS COMPONENTS 

DATE: January 22, 1996 08:10 EST WORD COUNT: 1,557 

...and diagram, file viewer, comment tool, project scheduler 
and spreadsheet, plus a collection of application development controls 
including button, picture , radio, check box, combo box, list box, 
slider, spinner, progress gauge, label, text box and outline. 

Lotus Component Developer Toolkit provides Notes and OCX developers 
with the tools and specifications for creating Lotus Components. The 
toolkit incudes a set... 
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Full text Availability: 
Detailed Description 
Claims 

Detailed Description 

... are compiled. See operation 56a of Figure 11 in operation 56b, a 
second database is created . The second database has each of the 
services offered by the current system grouped by...PACs. it also 
integrates with source code control, testing and deployment 
tools. 

0 Productl Application Server - a Java- and 
CORBA-based server that provides state and session 

management, built-in load. . .develop a migration plan that maps out the 
progression on configuration packages throughout the systems development 

life cycle. Figure 6 is an illustration showing a model migration plan 
in accordance with. . .specification deals with what the system must do, 
design addresses how the system will be constructed . 

validating that the design actually meets the requirements for 
functionality, performance, reliability, and usability is... release test, 
or the conversion test. The operational readiness test becomes especially 
key in client/ server environments. It has four parts. 

0 Roll out test - ensures that the roll out procedures. . .supports 

the entire project - information that is used both in systems building 

and in other 

management processes 
0 security Management tools 216 enable the development of security 
components 

Quality Management tools... 
...required to create documents, spreadsheets, and simple graphics or 
diagrams. More recently, the ability to access the internet and browse 
electronic documentation has been added to the suite of productivity 
tools. 

92 

Specifically, productivity tools include... a large number of people to 
work productively together, thus compressing the time required to 
develop a system. 

c) Is there concurrent development of multiple versions of the system? 
A comprehensive. . .aid and the Technology Products and vendors database, 
both available on the Knowledge Xchange. 

Startup & Shutdown 

A comprehensive development environment rapidly becomes sufficiently 
complex that the startup and shutdown of the environment must be 
managed carefully, and preferably automated. This is key to ensuring... 

...I 0 the carefully sequenced initialization of networking software, 
databases, web servers and more. Similarly, shutdown involves saving 
configuration changes as needed and gracefully taking down running 
software in the correct .. .the interaction diagrams described in the class 
definitions?), automatic propagation of changes to other diagrams, 
generation of reports, and generation of skeleton code. However, some 
tools have problems with. 

0 usability and stability 

Single users. . .envi ronments? 
It is important to determine how well the product integrates with other 
design and development tools, presentation services ( graphics , 
multi -media, etc.), data access services (databases and database API 
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libraries), distribution services (distributed TP... library of predefined 
widgets or screen elements. This library should be extendible and 
customizable, allowing developers to create new widget/element 
definitions or to enhance existing ones. 

n) is multi-language... 

...A valid performance model can only be created once a detailed 
communication design has been developed for the system. The performance 
model is derived from the detailed communication design, communication 
design... the "hi-fi" stage should focus on perfecting the details, 
in the later stages of development , usability laboratories can be 
extremely helpful for evaluating system design, usability labs, which can 
be.. .down into three major media types, each with its own set of tools. 

2D/3D images /Animation 

video 

Audio 

2D13D imagesl Animation 

Tools to handle these images range from simple paint packages to highly 
complex multi-layered animation graphics packages. The images 
created by these tools may be pixel based (bitinaps) or vector-based, 
each with their own advantages. 

Pixel -based tools (traditional graphics and image processing tools) offer 
more image flexibility especially in terms of color gradation and 
shading, but produce relatively large files. This format is therefore 
useful where the use of hiqh-quality textured images , or highly colored 
images is important, but where file storage and transmission is not an... 

...is defined by formulae rather than 
pixel position) offer much smaller file sizes, and dynamic image 
re-sizinq, while producing excellent print quality, but cannot easily 
handle shading and color gradation. 

This format is more... the presentation or repositories components. 

Management applications tools include capacity planning tools, 
performance management tools, license management tools, remote 
< management tools, systems monitoring tools, scheduling tools, help desk 
tools, etc.. Some Enterprise. . .actual costs, determines chargeback costs 
based on pre-defined algorithms and bills users for service rendered . 



Billing & Accounting also makes payments to service providers for 
services and equipment provided in... 

Claim 

Services Client Service 
Hall Hrrp pag 

flr@ser nasad, web mgmi a File Tranider swim 
Rendering (FrP) 
F-APPReadw Proxy Sooint Bawra 
E,:.v@wi SerAces corrimnicalons - SS 
Somme 

web Appl ication. . .web browsers E3 Provides adapter or mechanism to 
communicate with mdarnall system E3 Supports page rendering for 
multiple languages hat provide additional content such se catalog 
information 

0 Supports multiple content .. .Even' t/6 ate 
Performance Management Product validation Archiving 
Generation 
Security Management 
system Startup 

and Shutdown Physical Site Management Release Tesung 

Network Management 

1348 

131 E; 

N 



integration Platform-: 
Network. . .internet Service 
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nr Based web content caching HTTP 1 Page File Transfer somice 

Auth ti cation (radius) Rendering (ftp) 

F-web @Dsts Application Pmxyr of @seNjce Secure Browsa' 

ement Services Firowall Service communications .NETWORK 2810 

2812 

AFFORDING FIREWALL SERVICES ON THE NETWORK 

Figure 28 
1416 

PROVIDING HTTP PAGE RENDERING OVER A NETWORK FRAMEWORK 2900 
2902 

ENABLING SECURE BROWSER COMMUNICATION OVER THE NETWORK 

FRAMEWORK 

AFFORDING. . . 
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Detailed Description 
Claims 

English Abstract 

...a piece of digital content in an encrypted form, and a corresponding 
digital license for rendering the digital content. A first key is 
derived from a source available to the device... 
...signature and the digital content package. A second key is derived based 
on the first diqital signature, and a second digital signature is 
obtained from the license . The second key is applied to the second 
digital signature to validate the second digital... 

Detailed Description 

allows access to encrypted digital content only in accordance with 1 5 
parameters specified by license rights acquired by a user of the 
digital content. 

BACKGROUND OF THE INVENTION 
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Digital rights management and enforcement is highly desirable in 
connection. . . 

...board, an electronic network, the Internet, etc. upon being received by 
the user, such user renders or the digital content with the aid of an 
appropriate rendering device such as a media player on a personal 
computer or the like. 

Typically, a... 

...A need exists, then, for providinC an enforcement architecture and 
method that allows the controlled rendering or playing of arbitrary 
forms of digital content, where such control is flexible and definable... 

...the content owner of such digital content. A need also exists for 
providing a controlled rendering environment on a computing device such 
as a personal computer, where the rendering environment includes at 
least a portion of such enforcement architecture. Such controlled 
rendering environment allows that the digital content will only be 
rendered as specified by the content owner, even though the digital 
content is to be rendered on a computing device which is not under the 
control of the content owner. 

Further. . . 

...license at the user's computing device or client machine. 

when" a user attempts to render the digital content on a computing 
device, the rendering application invokes a Digital Rights Management 
(DRM) system on such user's computing device, if the user is attempting 
to render the digital content for the first time, the drm system 
either directs the user to a license server to obtain a license 
to render such digital content in the manner souff ht. or 
transparently obtains such license from such license server without 
any action necessary on the part of the user. The license includes. 

- a decryption. . . 
...a digital signature that ensures the integrity of the license. 

The user cannot decrypt and render the encrypted digital content 
without obtaining such a license from the license server . The 
obtained license is stored in a license store I 0 in the user's 
computing device. 

importantly, the license server only issues a license to a drm 
system 

that is 'trusted 1 (i.e., that can authenticate itself). To implement... 

...as provided by an approved certifying authority. The public key is made 
available to the license server for purposes of encrypting portions 
of the issued license, thereby binding such license to such... 

...a black box server an updated secure black box when the user first 
requests a license . The black box server provides the updated black 
box, along with a unique public/private key pair. Such updated... 

...the client machine sends the black box public key, version nuillber, and 
signature to the license server , and such license server issues a 

license onlv if the version number is current and the signature is 
valid. A license request... 

...a key id that identifies the decryption key associated with the 
requested digital content. Tile license server uses the black box 
public key to encrypt the decryption key. and the decryption key... 

...the downloaded license has been stored in the DRM system 
license store, the user can render the digital content according to the 
rights conferred by the license and specified in the license terms, when 
a request is made to render the digital content, the black box is 
caused to decrypt the decryption key and license... 

...the requestor is allowed to play such content. The decrypted content is 



05-Nov-OS 



19 



10:11 AM 



Ginger R. DeMille 



provided to the rendering application for rendering . 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summary, as well as the following detailed description... 

.with the Digital Rights Management (drm) system of the computing device 

of Fig. 4 to render content in accordance with one embodiment of the 

present 

invention; 

Fig. 6 is a flow. 

.system of Fig. 4 to validate a license and a piece of digital content 
and render the content in accordance with one embodiment of the present 
invention; 

Fig. I I is..;license rules that must be satisfied before such digital 
content 12 is allowed to be rendered on a user's computing device 14. 
Such license rules are embodied within a dicrital . ..architecture 10 
includes an authoring too] 1 8, a content-key database 20, a content 
server 22, a license server 24, and a black box server 26, as well 
as the aforementioned user's computing... 

.information are primarily employed by the user and the user's computing 
device 14 to obtain a license 16 to render the digital content 
12. Accordingly, such accompanying instructions / rules I 0 information 
may include an appropriately formatted. . .or security issues. As discussed 
below, such issues are dealt with in connection with the license < 
server 24 and the relationship between such license server 24 and 
the user's computing device 14. in one embodiment of the present 
invention. . . 

.server 22 sending (kd (PU-CS) S (pr-CS)) to the 
authoring tool 18. 

architecture - License server 24 

Referring again to Fig. 1, in one embodiment oftlie present invention, 
the license server 24 performs the functions of receiving a request 
for a license 16 from a user. . .includes the decryption key (KD) for 
decrypting the digital content 12. Such 

I L 

zn 

license server 24 and such functions will be explained in more detail 
below. 

preferably, and like the content server 22. the license server 24 
in the architecture 10 has a unique public / private key pair (PU-LS., PR 



...in more detail below. 

I 0 as with the authoring tool 18 and the content server 22, the 
license 

server 24 is implemented on an appropriate computer, processor, or 
other computing machine by way of... 
...22 may reside on a single computer, processor, or other computing 
machine together with the license server 24, each in a separate work 
space. 

in one embodiment of the present invention, prior to issuance of a 

license 16, the license server 24 and the content server 22 enter 
into an agency agreement or the like, wherein the license server 24 
in effect agrees to be the licensing authority for at least a portion of 



..one content server 22 may enter into an agency agreement or the like 
with several license servers 24. and/or one license server 24 may 
enter into an agency agreement or the like with several content servers 
22, all without departing from the spirit and scope of the present 
invention. 

preferably, the license server 24 can show to the world that it does 
in 

fact have the authority to... 
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...2 distributed by the content server 22. To do so, it is preferable that 
the license server 24 send to the content server 22 the license 
server 24. public lw@ 7 (pu-ls). and that the content server 22 then send 
to the license server 24 a digital certificate containing pu-ls as 
the contents signed by the content server... 

...with a piece of digital content 
12, and as part of the licensing function, the license server 24 must 
have access to the I 0 decryption key (KD) for such digital content 12. 
Accordingly, it is preferable that license server 24 have access to 
the content-key database 20 that has the decryption key (KD... 

r 

...will be explained in more detail below. 

as with the authoring tool 18, the content server 22, and the license 

server 24, the black box server 26 is implemented on an appropriate 
computer, processor, or other... 

...detailed discussion in the present disclosure. Moreover, in one 
embodiment of the present invention tile license server 24, the 
authoring tool 18, and/or the content server 22 may reside on a will not 
be rendered unless the user obtains a license 16 that permits the 
rendering in the manner sought. Preferably, then, the user's computing 
device 14 must provide a... 

...2 that can satisfy to the content owner that such computing device 14 
will not render the dioital content 12 except according to the license 
rules embodied in the license 16... 

...that is enabled when a user requests that a piece of digital content 12 
be rendered , that determines whether the user has a license 16 to 
render the digital content 12 in the manner soucrht, that effectuates 
obtaining such a license 16... 

...content 12 according to the license 16, and that decrypts the digital 
content 12 for rendering purposes if in fact the user has such right 
according to such license 16. The... 

...functions with the 
architecture 10 disclosed herein: (1) content acquisition, (2) license 
acquisition, (3) content rendering , and (4) black box 30 installation / 
update. Preferably, any of the functions can be performed... 

. . .stored in a manner 
such that the obtained digital content 12 is accessible by a rendering 
application 3 )4 (to be described below) running on the computing device 
14. and by. . . 

...acquired as any other data file. 

However, the drm system 3 )2 and/or the rendering applicatipn 3 )4 may 
include an interface (not shown) designed to assist the user in... 

...known to be sources of digital content 12, and the like. 

drm system 32 - Content Rendering , Part 1 

1 0 Referring now to Fig. 5A. in one embodiment of the present... 

...computing device 14 in the forin of a stored file, the user will attempt 
to render the digital content 12 by executing some variation on a 
render command (step 501). For example, such render command may be 
embodied as 1 5 a request to 'play' or 'open' the digital... 

...on an icon representative of the dialtal content 12. Of 
course, other embodiments of such render command may be employed 
without 

departing from the spirit and scope of the present invention, in general, 
such render command may be considered to be executed whenever a user 
directs that a file having... 
...content 12 be opened, run., executed, and/or the like. 

importantly, and in addition, such render command may be embodied 
as a request to copy the digital content 12 to another... 
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...an audio form, etc. as should be understood, the same digital content 12 
may be rendered in one form, such as oii a computer screen, and then in 
another form, such as a printed document, in the present invention, eacli 
type of rendering is performed only if the user has the right to do so. 
as will be. . .computing device 14 can detennine based on such extension to 
start a particular kind of rendering application '34. For example, if 
the file name extension indicates that the digital content 12 is a text 
file, the rendering application 34 is some form of word 
processor such as the "MICROSOFT WORD 1 ', distributed by... 

...indicates that the digital content 12 is an audio, video, and/or 
multimedia file, the rendering application 34 is some form of 
multimedia pi aver, such as "MICROSOFT media player", also distributed by 
MICROSOFT Corporation of Redmond, Washington. 

I 0 Of course, other methods of determininp a rendering application may 
be employed without departing from the spirit and scope of the present 
invention. . . 

. ..e., the aforementioned header information), where the meta-data includes 
information on the type of rendering application 34 necessary to 
render such digital 1 5 content 12. 

Preferably, such rendering application 3 )4 examines the digital 
content 

12 associated with the file name and determines... 

...rights-protected form (steps 503. 505). if not protected, the digital 
content 12 may be rendered without further ado (step 507). if 
protected, the rendering application 34 determines from the encrypted 
digital content 12 that the DRM system 32 is necessary to play such 
digital content 12. Accordingly, such rendering application 34 directs 
the user's computing device 14 to run the DRM system 32 thereon (step 
509). Such rendering applicatioii . '14 then calls such DRM system 32 to 
decrypt the digital content 12 (step... 

...the valid license 16. Preferabiv. once the DRM svstem 32 has been called 
by the rendering application 34. Such drm system '32 assumes control 
from the rendering application 3 )4. at least for purposes of 
determining whether tm t 
the user has. . . 

...on the I 0 reviewed license rules whether the requesting user has the 
right to render the requested digital content 12 in the manner sought, 
among other things. As should be understood, 

thel i censeeval uator36i sat rustedcomponenti ntheDRMsystem 1 ) 2 . inthepresent 
disclosure, to be •trusted 1 means that the license server 24 (or any 
other trusting element) is satisfied that the trusted element will carry 
out... 

...the license evaluator 36 determines that a user does in fact have the 
right to render the requested digital content 12 in the manner sought, 
the black box 30 is provided... 

...box 30 is also a trusted component in the DRM system 32. 

in particular, the license server 24 must trust that the black box 3 
) 0 will perform the decryption function only... 

...departing from the spirit and scope of the present invention. 
Preferably, and like the content server 22 and license server 24, 
the black box ' )0 in the DRM system 3 )2 has a unique 1. . .necessary. For 
example, if a particular license 16 only allows a pre-determined number 
of renderings of a piece of corresponding di (ital content 12, the 
state store 40 maintains state information on how many renderings have 
in fact taken place in connection with such license 16. The state store 
40. .. 

...system 32 on the computing device 14 iii an encrypted form. 
DRM SYSTEM 32 - Content Rendering , Part 2 
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Referring again to Fig. 5A, and agmin discussin( content rendering in 
one embodiment of the present invention, once the DRM system 32 has 
assumed control from the calling rendering application 3 )4. such drm 
system '32 then begins the process of determining whether the user has a 
right to render the requested digital content 12 in the manner sought, 
in particular, the drm system 3... 

...steps 515, 51 7) or attempts to acquire a valid, enabling license 16 
from the license server 24 (i.e. performs the license acquisition 
function as discussed below and as shown in... 

...r-1 
described below. 

Assume now that the drm system 32 has been requested to render a 
piece of digital content 12, and one or more licenses 16 corresponding 
thereto are. . . 

...26 whether the content 28 is in the form that it was received from the 
license server 24 (i.e., is valid). 

if no valid license 16 is found in the license. . .system 32 next 
determines whether such valid license 16 gives the user the right to 
render the corresponding digital content 12 in the manner desired (i.e., 
is enabling) (steps 607... 

...with the digital content 12. For example, such rights description may 
allow the user to render the digital content 12 into a sound, but not 
into a decrypted digital copy. 

AS. . . 

...the user is located, what type of computing device 14 the user is using, 
what rendering application 34 is calling the DRM system '32, the date, 
the time, etc. in addition... 

...to the license 16, (i.e., how many times the digital content 12 has been 
rendered , the total amount of time the digital content 12 has been 
rendered . etc.), where such state information is stored in the state 
store 40 of the DRM. . . 

...thereof, an identification 44 of the user and particular aspects 
thereof, an identification of the rendering application 4 and 
particular aspects thereof, a svstern clock 46, and the like, if no valid 
license 16 is found that provides the user with the right to render the 
digital content 12 in the manner sought, the DRM system 3)2 may then... 

. . .16 is obtainable. 

Of course, in some instances the user cannot obtain the right to render 
the diqital content 12 in the manner requested, because the content owner 
of such I. . . 

...change the rights currently available 
I t7 

for such digital content 12 by changing the licenses 16 available for 
such digital content 12. 

drm system 32 - License Acquisition 

Referring now to Fig. 7, if in fact the license evaluator 36 does not 
find... 

...content I -2 is packaged with information in an un-encrypted form 
regarding how to obtain a license 16 for rendering such digital 
content 12 (i.e., license acquisition information). 

in one embodiment of the present invention, such license acquisition 
information may include (among... 

...or more internet web sites or other site information at which one or 
more appropriate license servers 24 may be accessed, where each such 
license server 24 is in fact capable of issuincy a license 16 
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corresponding to the digital content... 

..manners without departing from the spirit and scope of the present 
invention. For example, the license 16 may be obtained from a 
license server 24 at an electronic bulletin board, or even in person 
or via re(TUlar mail in the form of... 

. .the like. 

Assuming that the location for obtaining a license 16 is in fact a 
license server 24 on a network, the license evaluator 3)6 then 
establishes a network connection to such license server 24 based on 
the web site or other site information, and then sends a request for a 
license 16 from such connected license server 24 (steps 701, 703). in 
I 0 particular, once the drm system 32 has contacted the license 
server 24. such DRM system 32 transmits appropriate license request 
information 36 to such license server 24. in one embodiment of the 
present invention, such license 16 request information 36 may... type of 
license 16 requested (if in fact multiple types are 
available) ; 

- the type of rendering application 34 that requested rendering of 

the 

:n 

digital content 12. 

and/or the like, among other things. Of course, greater or lessor amounts 
of license 16 request information 36 may be transmitted to the license 
server 24 by the DRM system without departing from the spirit and scope 
of the present flivention. For example, information on the type of 
rendering application 34 may not be necessary, while additional 
information about the user and/or the user's comptiting device 14 may be 
necessary. 

Once the license server 24 has received the license 16 request 
information 36 from the drm system 32, the license server 24 may then 
perform several checks for trust / authentication and for other purposes, 
in one embodiment of the present invention, such license server 24 
checks the certificate with the digital signature of the certifying 
authority to deten-nine whether such has been adulterated or otherwise 
modified (steps 705, 707). if so, the license server 24 refuses to 
grant any license 16 based on the request information 36. The license 
server 24 may also maintain a list of known 'bad 1 users and/or user .s 
computing. . . 

..based on the content ID (or package ID) iii-i the license request 
information, the license server 24 can interrogate the content-key 
database 20 (Fig. 1) and locate a record corresponding... 

..example, for a relatively small license fee, a license 16 allowing a 
limited number of renderings may be available. For a relatively greater 
license fee, a license 16 all owing unlimited renderings until an 
expiration date may be available. For a still greater license fee, a 
license 16 allowing unlimited renderings without any expiration date 
may be available. Practically any type of license 16 having any kind of 
license terms may be devised and issued by the license server 24 
without departing from the spirit and scope of the present invention. 

in one embodiment... 

..accomplished with the aid of a web page or the like as transmitted from 
the license server 24 to the user's computing device 14. Preferably, 
such web page includes information on all types of licenses 16 available 
from the license server 24 for the I 0 digital content 12 that is the 
basis of the license 16 request. 

in one embodiment of the present invention, prior to issuing a license 
16, the license server 24 checks the version number of the black box 
-3 )0 to determine whether such... 

..secure and protected from attacks from a user with nefarious purposes 
(i.e., to improperly render digital content 12 without a license 16, or 
outside the terms of a corresponding license... 

..successfully attacked by such a nefariOLiSuser . Preferably, and as a 
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matter of trust, if the license server 24 receives a license 
request with request information 1 )6 including a black box 30 version 
number that is not relatively current, such license server 24 refuses 
to issue the requested license 16until the corresponding black box 30 is 
upgraded to a current version, as will be described below. Put simply, 
the license server 24 will not trust such black box 30 unless such 
black box 30 is relatively... 

...200 instances of decryption). Moreover, 'current' may be based on policy 
as set by each license server 24, where one license server 24 may 
define 'current' differently from another license server 24. and a 
license server 24 may further define 'current' differently depending 
on the digital content 12 for which ...or depending on the type of 
license 16 requested, among other things. 

Assuming that the license server 24 is satisfied from the version 
number of a black box 30 or other indicia thereof that such black box 30 
is current, the license server 24 then proceeds to negotiate terms 
and conditions for the license 16 with the user (step 713). 
Alternatively, the license server 24 negotiates the license 16 1 5 
with the user, then satisfies itself from the version number of the... 
...the type of license 16 to be issued, and other factors. For example, if 
the license server 24 is merely issuing a paid-up unlimited use 
license 16, very little need be... 

...and other details, such items and details may need to be worked out 
between the license server 24 and the user before the license 16 can 
be issued. 

as should be understood... 

...the circumstances, the license 
negotiation may require that the user provide further information to the 
license server 24 (for example, information on the user, the user's 
computing device 14. etc.). 

Importantly, the license negotiation may also require that the user and 
the license server 24 determine a mutually acceptable payment 
instrument (a credit account, a debit account, a mailed... 

...the terms of the license 16 have been negotiated and agreed to 
by both the license server 24 and user (step 715). a digital license 
16 is generated by the license server 24 (step 719), where such 
generated license 16 is based at least in part on... 

...receive in the license request 
(i.e.,(PU-1313 (KD)); 

- a digital signature from the license server 24 (without any 
attached 

certificate) based on (kd (drl)) and (pu-bb (kd)) and encrypted 

with the license server 24 private key (i.e., (s (pr-ls)))-., and 

- the certificate that the license server 24 obtained previously from 
the content server 22, such certificate indicating that the license 
server 24 has the authority from the content server 22 to issue the 

1 i cense 16 (i . . . 

...user's computing device 14 may become irretrievably lost. Accordingly, 
it is preferable that the license server 24 maintain a database 50 of 
issued licenses 16 1 5 (Fig. 1), and that such license server 24 
provide a user with a copy or re-issue (hereinafter 're-issue') of an... 

...taken into account when re-issuing a license 16. For example, a fixed 
number of renderings license 16 might legitimately be re-issued in a 
pro-rated form after a relatively... 

. . .Black box 30 

As was discussed above, as part of the function of acquiring a license 
16, the license server 24 may deny a request for a license 16 from a 
user ...such 'lite' black box 30 is then upgraded to a unique regular 
version prior to rendering a piece of digital content 12. As should be 
understood, if each black box 3... 

...the drm system 32 at any time, sucli as for example a time when a 
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license server 24 deems the black box ' )o not current, as was 
discussed above. 

Thereafter, the black... 

...license acquisition function, is a proffer or vouching mechanism from 
the certifying authority that a license server 24* should trust the 
black box ' )0. of course, the license server 24 must trust the 
certifvina authorltv to such a . tn certificate for a black box 30 that 
is in fact trustworthy. It mav be the case, in fact, that the license 
server 24 does not trust a particular certifying autlioritN and refuses 
to - t7 honor any certificate... 

...905). Accordingly, the upgraded black box 30 can still employ the old 
keN 7pairs to access older digital content 12 and older corresponding 
licenses 16 that were generated according to such old key pairs, as 
will be discussed in... is not intended for such other computing device 
14, and does not allow any requested rendering to proceed on such other 
computing device 14. 

Once the new black box 30 is... 

...a license acquisition function or with any other 1 5 function. 

drm system 32 - Content Rendering , Part 3 

Referring now to Fig. 513, and assuming, now, that the license evaluator 
'36... 

...least one of such valid licenses 16 provides the user with the rights 
necessary to render the corresponding digital content 12 in the manner 
sought (i.e., is enabling), the license... 

...36 then selects one of such licenses 16 for further use (step 519). 
Specifically, to render the requested digital content 12, trie license 
evaluator '16 and the black box 30 'in... 

. . .kd) for the digital 
content 12 and permission from the license evaluator 3 ) 6 to render 
the digital content 12, control may be returned to the rendering 
application 3 )4 (steps 525, 527). in one embodiment of the present 
invention, the rendering application 4 then calls the drm system 32 / 
black box 30 and directs at least... 

...then the black box '10 returns the decrypted digital I 0 content 12 to 
the rendering application 34 for actual rendering (steps 5' )' ), 
535). The rendering application 34 may either send a portion of the 
encrypted digital content 12 or the... 

...without departing from the spirit and scope of the present invention. 

5 Preferably, when the rendering application 3 )4 sends digital content 
12 to the black box 30 for decryption, the black box 30 and/or the DRM 
system 32 authenticates such rendering application 34 to ensure that it 
is in fact the same rendering application 34 that initially requested 
the DRM systen-1 3 )2 to run (step 53 1). 

otherwise, the potential exists that rendering approval may be obtained 
improperly by basing the rendering request on one type of renderino 
application 34 and in fact rendering with another type of rendering 
application 3 )4. Assuming the authentication is successful and the 
digital content 12 is decrypted by the black box '30, the rendering 
application 34 may then render the decrypted digital content 1.) (steps 
533, 535). 

Sequence of Key Transactions 
Referring now to. . . 

...Mainly, in sucli sequence, the DRM system 32 obtains the decryption key 
(kd) from the license 16. uses information obtained from the license 
16 and the digital content 12 to authenticate or ensure the validity 
of both, and then determines whether the license 16 in fact provides the 
right to render the digital 
L 

05-Nov-05 26 10:11 AM 



Ginger R. DeMille 

content 12 in the manner sought, if so, the diaital content 12 may be 
rendered . 

tffl 

Bearing in mind that each license 16 for the digital content 12. as... 
..30 public key (PU-BB) (i.e.,(PU-BB (KD)); 

- the digital signature from the license server 24 based on (kd 
(drl)) 

and (pu-bb (kd)) and encrypted with the license server 24 private key 
(i.e., (S (PR-LS))); and 

1 5 - the certificate that the license server 24 obtained previously 
from the 

content server 22 (i.e., (cert (pu-ls) S (PR...to decrypt the digital 
content 12 without any further ado. However, and also importantly, the 
license server 24 trusts the black box 30 not to do so. Such trust was 
established at the time such license server 24 issued the license 
16 based on the certificate from the certifying authority vouching for 
the trustworthiness of such... 

..PU-CS) to satisfy itself that the certificate is valid (step 1007), 
signifying that the license server 24 that issued the license 16 had 
the authoritv from the content server 22 to... 

..S (PR-LS)) from the license 16. the black box '30 

applies the newly obtained license server 24 public key (pu-lsi) to 
satisfy itself that the license 16 is valid (step... 

..device 14 has the right based on the drl 48 in the license 16 to render 
the corresponding digital content 12 in the manner sought (i.e.. whether 
the DRL 48. . . 

..user's computing device 14 has the right based on the DRL 48 terms to 
render the corresponding digital content 12 in the manner sought, the 
license evaluator 3 6 informs the black box 0 that such black box 0 can 
render the corresponding digital content 12 according to the decryption 
key (KD). The black box 30... 

..12 and the license 16 are in the same form as issued from the content 
server 22 and the license server 24, respectively. Accordingly, it 
is difficult if not impossible to decrypt the digital content 12 by 
bypassing the license server 24, and also difficult if not impossible 
to alter and then decrypt the di gital... 

..performed as follows. 

Rather than having a signature encrypted by the private key of the 
license server 16 (pr-ls), as is seen in Fig. 8, each license 16 has a 
signature. . . 

..The private root key (PR-R) is known only to a root entity, and a 
license server 24 can only issue licenses 16 if such license server 
24 has arranged with the root entity to issue licenses 16. 

in particular, in such embodiment. 

I . the license server 24 provides its public key (pu-ls) to the root 
entity; 

2. the root entity returns the license server public key (pu-ls) to 
such 

license server 24 encrypted with the private ...pr-r) (i.e., 
1 5 (cert (pu-ls) s (pr-r)))-1 and 

the license server 24 then issues a license 16 with a signature 
encrypted with the license server private key (S (pr-ls)). and also 
attaches to the license the certificate froin the... 

..PU-R) to the attached certificate (CERT 

(PU-LS) S (PR-R)) to obtain the license server public key (PU-LS); 
and 

2. applies the obtained license server public key (pu-ls) to the 
signature of the license 16 (s (pr-ls). 
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Importantly, it should be recognized that 'ust as the root entity gave 
the license server 24 permission to issue licenses 16 by providing 
the certificate (cert (pu-ls) s (pr-r)) to such license server 24. 
such license server 24 can provide a similar certificate to a second 
license server 24 (i.e.. (cert (PU-LS2) S (pr-ls 1)), thereby allowing 
the second license server to also issue licenses 16. as should now 
be evident, a license 16 issued by the second license server would 
include a first certificate (CERT (PU-LS I) S (PR-R)) and a second... 

...periodically change the private root key (PR-R), thereby I 0 likewise 
periodically requiring each license server 24 to obtain a new 
certificate (CERT (PU-LS) S (PR-R)). Importantly, as a requirement for 
obtaining such new certificate, each license server may be required 
to upgrade itself. As with the black box 30, if a license server 24 
is relatively current, i.e., has been upgraded relatively recently, it is 
less likely that license server 24 has been successfully attacked. 

Accordingly, as a matter of trust, each license server 24 is 
preferably required to be upgraded periodically via an appropriate 
upgrade trigger mechanism such... 

...rights description or terms of a license 16 to determine if such DRL 48 
allows rendering of a corresponding piece of digital content 12 in the 
manner sought, in one embodiment .if available; 
activating a license 16. if available; and/or 
performing license acquisition from a license server 24. 

CONCLUSION 

The programming necessary to effectuate the processes performed in 
connection with the present .. .the present invention 
comprises a new and useful enforcement architecture 10 that allows the 
controlled rendering or playing of arbitrary forms of digital content 
12. where such control is flexible and... 

...owner of such digital content 12. Also, the present invention comprises 
a new useful controlled rendering environment that renders digital 
content 12 only as specified by the content owner, even though the I 0 
digital content 12 is to be rendered on a computing device 14 which is 
not under the control of the content owner... 

Claim 

... of digital content in an 
t:l 

encrypted form; and 

a corresponding digital license for rendering the digital content, 
the method comprising: 

deriving a first key from a source available to... 

...and the digital content package: 
I 0 deriving a second key based on the first digital signature; 
obtaining a second digital signature from the license ; and 
applying the second key to the second digital sionature to validate the 
second digital . . . 

...description specifying terms and conditions that must be satisfied 
before the digital content may be rendered , the license rights 
description being encrypted with the decryption key (KD) (i.e., (KD (drl 



..description specifying terms and conditions that must be satisfied 
before the dipital content may 
be rendered , the method further comprising: 

evaluating the license terms and conditions to determine whether the 
digital content is permitted to be rendered in the manner sought; 
if so, applying (KD) to the encrypted digital content to decrypt such 
encrypted digital content; and 

rendering the decrypted digital content. 
4:) 

17 The method of claim I I wherein the encrypted. . .description specifying 
terms and conditions that must be satisfied before tile digital content 
may be rendered , the license rights description being encrypted with 
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the decryption key (kd) (i.e., (kd (drl... 

...description specifying terms and conditions that must be satisfied 
before tile digital content may 
be rendered , the method further comprising: 

evaluating the license terms and conditions to determine whether the 
digital content is permitted to be rendered in the manner sought-, 
if so, applying (KD) to the encrypted diaital content to decrypt such 
encrypted digital content; and 

rendering the decrypted digital content. 
25 A method for a device to interdependent! y validate a piece of digital 
content and a corresponding digital license for rendering the digital 
content, the digital content being encrypted, the encrypted digital 
content being decryptable according... 

...DRL) specifying terms and conditions that must be satisfied before the 
digital content may be rendered , the method further comprising; 
evaluating the license terms and conditions to determine whether the 
digital content is permitted to be rendered in the manner sought; 
if so, applying (KD) to the encrypted digital content to decrypt such 
encrypted digital content, and 
rendering the decrypted digital content. 

I 

28 The method of claim 27 wherein the II cerise... a piece of digital 
content in an 
encrypted form; and 

a corresponding digital license for rendering the digital content, 
the method comprising: 

deriving a first key from a source available to... 

. . .digital signature 
and the digital content package; 

deriving a second key based on the first digital signature; 
1 5 obtaining a second digital signature from the license : and 
applying the second key to the second digital sianature to validate the 
second digital ... 

...description specifying terms and conditions that must be satisfied 
before the digital content may be rendered . the license rights 
description being encrypted with the decryption key (KD) (i.e.. (kd (drl 



...description specifying terms and conditions that must be satisfied 
before the digital content may 
be rendered , the method further comprising: 

evaluating the license terms and conditions to determine whether the 
digital content is permitted to be rendered in the manner sought; 
if so, applying (KD) to the encrypted digital content to decrypt such 
encrypted digital content; and 
rendering the decrypted digital content. 

45 The method of claim 39 wherein the encrypted digital content... 
description specifying terms and conditions that must be satisfied before 
the digital content may be rendered , the license rights description 
being encrypted with the decryption key (KD) (i.e., (KD (drl... 

...description specifying terms and conditions that must be satisfied 
before the digital content may 
be rendered , the method further comprising: 

evaluating the license terms and conditions to determine whether the 
1 5 digital content is permitted to be rendered in the nianner sought; 
if so, applying (kd) to the encrypted digital content to decrypt such 
encrypted digital content; and 

rendering the decrypted digital content. 
Digital content 12 
T PU-CS, PR-CS 

paCKage 

Authoring Tool . . . 

. . .Key Database 
20 
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RENDERING DIGITAL CONTENT IN AN ENCRYPTED RIGHTS -PROTECTED FORM 
Full text Availability: 
Detailed Description 
Claims 

English Abstract 

...system locates each license in the license store corresponding to the 
digital content to be rendered , selects one of the located licenses , 
obtains (kd) from the selected license , decrypts the digital content 
with (kd) , and returns the decrypted digital content to the rendering 
application for actual rendering . 

Detailed Description 
Title of the invention 

RENDERING DIGITAL CONTENT IN AN ENCRYPTED 
RIGHTS- PROTECTED FORM 

CROSS-REFERENCE TO RELATED APPLICATION 

Thi s appl i cat i on . . . 

...architecture that allows access to encrypted digital content only in 
accordance with parameters specified by license rights acquired by a 
user of the digital content. 

BACKGROUND OF THE INVENTION 

Digital rights management and enforcement is highly desirable in 
connection. . . 

...board, an electronic network, the internet, etc. upon being received by 
the user, such user renders or 'plays 1 the digital content with the aid 
of an appropriate rendering device such as a media player on a personal 
computer or the like. 

Typically, a... 

...A need exists, then, for providing an enforcement architecture and 
method that allows the controlled rendering or playing ofarbitrary 
forms of digital content, where such control is flexible and definable bv 
the content owner of such digital content. A need also exists for 
providing a controlled rendering environment on a computing device such 
as a personal computer, where the rendering environment includes at 
least a portion of such enforcement architecture. Such controlled 
rendering environment allows that the digital content will only be 
rendered as specified by the content owner, even though the digital 
content is to be rendered on a computing device which is not under the 
control of the content owner. 

Further. . . 



. . . L I 

at the user's computing device or client machine. 

when a user attempts to render the digital content on a computing 
device, the rendering application invokes a Di gital Rights Manao ement 
(DRM) system on such user's computing first time, the DRM system either 
directs the user to a license server to obtain a license to 
render such digital content in the manner sought, or transparently 
obtains such license from such license server without any action 
necessary on the part of the user. The license includes. 

- a decryption. . . 

...a digital signature that ensures the integrity of the license. 

The user cannot decrypt and render the encrypted digital content 
without obtaining I 0 such a license from the license server . The 
obtained license is stored in a license store in the user's computing 
device. 

Importantly, the license server only issues a license to a drm 

system 

that is 'trusted' (i.e., that can authenticate itself), to implement... 
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...as provided by an approved certifying authority. The public key is made 
available to the license server for purposes of encrypting portions 
of the issued license, thereby binding such license to such... 

...a black box server an updated secure black box when the user first 
requests a license . The black box server provides the updated black 
box, along with a unique public/private key pair. Such updated... 

...the client machine sends the black box 
public key. version number, and signature to tile license server , and 
such license server issues a license only if the version number is 
current and the signature is valid. A license request... 

...a key id that identifies the decryption key, associated with the 
requested digital content. The license server uses the black box 
public key to encrypt the decryption key, and the decryption key... 

...the downloaded license has been stored in the drm system 
license store, the user can render the digital content according to the 
rights conferred by the license and specified in the license terms, wien 
a request is made to render the digital content, the black box is 
caused to decrypt the decryption key and license... 

...the requestor is allowed to play such content. The decrypted content is 
provided to the rendering application for rendering . 

5 BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summary, as well as the followin(y. . . 

...with the Digital Rights Management (DRM) system of the computing device 
of Fig. 4 to render content in accordance with one embodiment of the 
present 
invention; 
Fig. 6 is a flow. . . 

...system of Fig. 4 to validate a license and a piece of digital content 
and render the content in accordance with one embodiment of the present 
invention; 

Fig. I I is. . .i cense 

rules that must be satisfied before such digital content 12 is allowed to 
be rendered on a user's computing device 14. such license rules are 
embodied within a digital .. .the architecture 10 includes an authoring 
tool 18. a content-key database 20, a content server 22, a license 
server 24, and a black box server 26. as we] I as the aforementioned 
user's... 

...information are primarily employed by the user and the user's computing 
device 14 to obtain a license 16 to render the digital content 
12. Accordingly, such accompanying instructions / rules information may 
include an appropriately formatted license acquisition. . .or security 
issues. As discussed below, such issues are dealt with in connection with 
the license server 24 and the relationship between such license 
server 24 and the user's computing device 14. in one embodiment of the 
present invention... 

...server 22 sending (kd (pu-cs) s (pr-CS)) to the 
authoring tool 18. 

architecture - License server 24 

Referring again to Fig. 1, in one embodiment offlie present invention, 
the license server 24 performs the functions of ...such transmitted 
license includes the decryption key (KD) for decrypting the digital 
content 12. Such license server 24 and such functions will be 
explained in irlore detail below. 

preferably, and like the content server 22. the license server 24 
in the architecture 10 has a unique public / private key pair (PU-LS. PR 

...be explained in more detail below. 

as with the authoring tool 18 and the content server 22, the license 
I 0 server 24 is implemented on an appropriate computer, processor, or 
other computing machine by way of... 
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...22 may reside on a single computer, processor, or other computing 
machine together with the license server 24, each in a separate work 
space. 

in one embodiment of the present invention, prior to issuance of a 

license 16, the license server 24 and the content server 22) enter 
into an agency agreement or the like, wherein the license server 24 
in effect agrees to be the licensing authority for at least a portion of 



...one content server 22 may enter into an agency agreement or the like 
with several license servers 24. and/or one license server 24 may 
enter into an agency agreement or the like with several content servers 
22, all without departing from the spirit and scope of the present 
invention. 

Preferably, the license server 24 can sbow to ffie world that it does 
in 

fact have the authority to... 

...12 distributed by the content server 22. To do so, it is preferable that 
the license server 24 send to the content server 22 the license 
server 24 public key (pu-ls). and that the content server 22 then send 
to the license server 24 a dwital certificate containing pu-ls as the 
contents signed by the content server... 

...with a piece of digital content 
12, and as part of the licensing function, the license server 24 must 
have access to the decryption key (kd) for such digital content 12. 
Accordingly, it is preferable that I 0 license server 24 have access 
to the content-kev database 20 that has the decryption key (KD. . . 

...will be explained in more detail below. 

As with the authoring tool 18, the content server 22. and the license 

server 24. the black box server 26 is implemented oil aii appropriate 
computer, processor, or other... 
...detailed discussion in the present disclosure. Moreover, in one 
embodiment of the present invention the license server 
24, the authoring tool 18, and/or the content server 2 
2 may reside on. . .specified by such content owner, i.e. that the digital 
content 12 will not be rendered unless the user obtains a license 16 1 
5 that permits the rendering in the manner sought. Preferably, then, 
the user's computing device 14 must provide a... 

...32 that can satisfy to the content owner that such computing device 14 
will not render the digital content 12 except according to the license 
rules embodied in the license 16... 

...that is enabled when a user requests that a piece of digital content 12 
be rendered , that determines whether the user has a license 16 to 
render the digital content 12 in the manner sought, that effectuates 
obtaining such a license 16... 

...content 12 accordina to the license 16, and that decrypts the digital 
content 12 for rendering purposes if in fact the user has such right 
according to such license 16. The... 

...functions with the 

architecture 10 disclosed herein: (1) content acquisition, (2) license 

acquisition, (3) content rendering , and (4) black box 3 )0 installation 

/ update. Preferably, any of the functions can be... 

. . .stored in a manner 
such that the obtained digital content 12 is accessible bN7 a rendering 
application 3 )4 (to be described below) running on the computing device 
14, and by. . . 

...easily acquired as any other data file. 

However, the drm system 32 and/or the rendering application 34 may 
include an interface (not shown) designed to assist the user in obtaining 
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...known to be sources of digital content 12, and the like. 
DRM SYSTEM 32 - Content Rendering , Part I 

Referring now to Fig. 5A. in one embodiment of the present invention, 
I. . . 

...computing device 14 in the form of a stored file, the user will attempt 
to render the digital content 12 by executing some variation on a 
render command (step 501). For example, such render command may be 
embodied as a request to 'play' or 'open 1 the digital content 12... 

...on an icon representative of the digital content 12. Of 
course, other embodiments of such render command may be employed 
without 

departing from the spirit and scope of the present invention, in general, 
such render command may be considered to be executed whenever a user 
directs that a file havinCF... 

...content 12 be opened, run. executed, and/or the like. 

importantly, and in addition, such render command may be embodied 
as a request to copy the digital content 12 to another... 

...an audio form, etc. As should be understood, the same digital content 12 
may be rendered in one form, such as on a computer screen, and then in 
another form, such as a printed document, in the present invention, eacli 
type of rendering is performed only if the user has the right to do so. 
as will be... device 14 can deten-nine based on such extension to start a 
particular kind of rendering application 34. For example, if the file 
name extension indicates that the digital content 12 is a text file,, the 

rendering application 3 )4 is some form of word 
processor such as the "MICROSOFT word", distributed... 

...indicates that the digital content 12 is an audio, video, and/or 
multimedia file, the rendering application 34 is some form of 
multimedia player, such as "MICROSOFT MEDIA PLAYER", also distributed by 
MICROSOFT corporation of Redmond, Washington. 

Of course, other methods of determining a rendering application may 
I 0 be employed without departing from the spirit and scope of the... 

...e., the aforementioned header information), where the meta-data includes 
information on the type of rendering application 34 necessary to 
render such digital content 12. 

preferably, such rendering application 34 examines the digital content 
12 associated with the file name and determines whether... 

...rights-protected form (steps 503. 505). If not protected, the digital 
content 12 may be rendered without further ado (step 507). If 
protected, the rendering application 34 determines from the encrypted 
dialtal content 121 that the DRM system 32 is necessary to play such 
digital content 12. Accordingly, such rendering application 34 directs 
the user's computing device 14 to run the DRM system 32 thereon (step 
509). Such rendering application 34 then calls such drm system '32 to 
decrypt the digital content 12 (step... 

...valid license 16. Preferablv. once the DRM svstem 32 has been called by 
the rendering application 34. such DRM system 32 assumes control from 
the rendering application 34. at least for purposes of determining 
whether the user has a right to... 

...determines based on the reviewed license rules whether the requesting 
user has the right to render the requested .10 digital content 12 in 
the manner sought, among other things. As should be understood, 
thel i censeeval uator36i sat rustedcomponenti i i theDRMsystem 1 ) 2 . inthepresent 
disclosure, to be 'trusted 1 means that the license server 24 (or any 
other trusting element) is satisfied that the trusted element will carry 
out... 
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.the license evaluator 36 determines that a user does in fact have the 
right to render the 

t= 

requested digital content 12 in the manner sought, the black box '10 is 



...box 30 is also a trusted component in the DRM system 32. 

in particular, the license server 24 must trust that the black box 
'10 will perform the decryption function only in... 

...departing from the spirit and scope of the present invention. 
Preferably, and like the content server 22 and license server 24, 
the black box '10 in the DRM system 3)2 has a unique public... For 
example, if a particular license 16 only allows a pre-deten-nined number 
of renderings of a piece of corresponding digital content 12, the state 
store 40 maintains state information on how many renderings have M fact 
taken place in connection with such license 16. The state store 40... 

...system 32 on the computing device 14 in an encrypted form. 

DRM system 32 - Content Rendering , Part 2 

Referring again to Fig. 5A. and again discussina content rendering in 
one embodiment of the present invention, once the drm system 32 has 
assumed 

control from the calling rendering application 
3 )4, such DRM system ' )2 then begins the 

process of determining whether the user has a right to render the 
requested digital content 12 in the manner sought, in particular, the DRM 
system 32. . . 

...store (steps 515. 517) or attempts to acquire a valid, enabling license 
16 from the license server 24 (i.e. performs the license acquisition 
function as discussed below and as shown in... 

...to be described below. 

Assume now that the drm system 32 has beeii requested to render a 
piece of digital content 12, and one or more licenses 16 corresponding 
thereto are. . . 

...26 whether the content 28 is in the form that it was received from the 
license server 24 (i.e., is valid). 

if no valid license 16 is found in ...system 32 next determines whether 
such valid license 16 gives the user the right to render the 
corresponding digital content 12 in the manner desired (i.e., is 
enabling) (steps 607... 

...with the digital content 12. For example, such rights description may 
allow the user to render the di gital content 1 2 into a sound, but not 
into a decrypted digital... 

...the user is located, what type of computing device 14 the user is using, 
what rendering application 34 is calling the drm system 32, the date, 
the time, etc. in addition... 

...to the license 16, (i.e., how many times the diorital content 12 has 
been rendered , the total amount of time the digital content 12 has been 

rendered . etc.), where such state information is stored in the state 
store 40 of the DRM. . . 

...thereof, an identification 44 of the user and particular aspects 
thereof, an identification of the rendering application 3 )4 and 
particular aspects thereof, a system clock 46, and the like, if no valid 
license 16 is found that provides the user with the right to render the 
digital content 12 in the manner sought, the DRM system 32 may then 
perform. . . 

. . . 16 is obtainable. 

Of course, in some instances the user cannot obtain the right to render 
the digital content 12 in the manner requested, because the content owner 
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of such digital ... 

..any time change the rights currently available for such digital content 
12 by changing the licenses 16 available for such digital content 12. 

drm system 32 - License Acquisition 

Referring now to Fig. 7, if in fact the license evaluator 3 )6 does not 



...digital content 12 is packaged with information in an un-encrypted form 
regarding how to obtain a license 16 for rendering such digital 
content 12 (i.e., license acquisition information). 

in one embodiment of the present invention, such license acquisition 
information may include (among... 

...or more Internet web sites or other site information at which one or 

more appropriate license servers 24 may be accessed, where each such 
license ser 

lcr 24 is in fact capable... 

...manners without departing from the spirit and scope of the present 
invention. For example, the license 16 may be obtained from a 
license server 24 at an electronic bulletin board, or even in person 
or via regular mail in the form of a... 

. . .the like. 

Assuming that the location for obtaining a license 16 is in fact a 
license server 24 on a network, the license evaluator 1 ) 6 then 
establishes a network coni-lection to such license server 24 based on 
the web site or other site infori -nation, and then sends a request for a 
license 16 from such connected license server 24 (steps 701, 70' )). 
in particular, once the drm system 32 has contacted the license server 

24, such DRM I 0 system 32 transmits appropriate license request 
information 36 to such license server 24. in one embodiment of the 
present invention, such license 16 request information 36 may... type of 
license 16 requested (if in Eact multiple types are 
available) ; 

- the type of rendering application 34 that requested rendering of 
the 

di ital content 12-. 
9 

and/or the like, among other things. Of... 

...lessor amounts of license 16 
t@ 

request information 3 )6 may be transmitted to the license server 24 
by the drm system 

, )2withoutdepartingf romthespi ritandscopeofthepreseiitliiventioia. 
Forexample, information on the type of rendering application 34 may not 
be necessary, while additional information about the user and/or the 
user's computing device 14 may be necessary. 

Once the license server 24 has received the license 16 request 
information 36 from the DRM system 32, the license server 24 may then 
perform several checks for trust / authentication and for other purposes, 
in one embodiment of the present invention, such license server 24 
checks the certificate with the digital signature of the certifying 
authority to detern-ilne whether such has Been adulterated or otherwise 
modified (steps 705, 707). if so, the license server 24 refuses to 
grant any I 0 license 16 based on the request information 36. The 
license server 24 may also maintain a list of known 'bad 1 users and/or 
user's computing. 

...particularly based on the content ID (or package ID) in the license 
request information, the license server 24 can interrogate the 
content-key database 20 (Fig. 1) and locate a record corresponding... 

...for a relatively small license fee. a license 16 allowing a limited 
number of renderings may be available. For a relatively areater 
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licefise fee. a license 16 allowina unlimited renderings until an 
expiration date may be available. For a still orreater license fee, a 
license 16 allowinp unhinited renderinas without any expiration date 
inay be available. Practically any type of license 16 having any kind of 
license terms may be devised and issued by the license server 24 
without departing from the spirit and scope of the present invention. 

in one embodiment. . . 

...accomplished with the aid of a web page or the like as transmitted from 
the license server 24 to the user's computing device 14. Preferably, 
such web page includes information on all types of licenses 16 available 
from the license server 24 for the digital content 12 that is the 
basis of the license 1 6 request. 

I 0 In one embodiment of the present invention, prior to issuing a 
license 16, the license server 24 checks the version number of the 
black box '10 to determine whether such black... 

...secure and protected from attacks from a user with nefarious purposes 
(i.e., to improperly render digital content 12 without a 5 license 16, 
or outside the terms of a corresponding... 

...attacked by such a nefarious user. Preferably, and as a matter of trust, 
if the license server 24 receives a license request with request 
infori -nation 3 )6 including a black box 3)0 version number that is not 
relatively current, such license server 24 refuses to issue the 
requested license 16 until the corresponding black box-30 is upgraded to 
a current version, as will be described below. Put simply, the license 
server 24 will not trust such black box 30 unless such black box 30 is 
relatively. . . 

...200 instances of decryption). Moreover, 'current 1 may be based on 
policy as set by each license server 24, where one license server 
24 may define 'current 1 differently from another license server 24, 
and a license server 24 may further define 'current 1 differently 
depending on the digital ...on the type of license 16 requested, among 
other things. 

I 0 Assuming that the license server 24 is satisfied from the version 
number of a black box 30 or other indicia thereof that such black box 3 
)0 is current, the license server 24 then proceeds to negotiate terms 
and conditions for the license 16 with the user (step 713). 
Alternatively, the license server 24 negotiates the license 16 with 
the user, then satisfies itself from the version number of the black box 



...the type of license 16 to be issued, and other factors. For example, if 
the license server 24 is merely issuing a paid-up unlimited use 
license 16, very little need be... 

...and other details, such items and details may need to be worked out 
between the license server 24 and the user before the license 16 can 
be issued. 

as should be understood... 
...circumstances, the license 
negotiation may require that the user provide further infori-riation to 
the license server 24 (for example, information on the user, the 
user's computing device 14, etc.). 

2 D5 Importantly, the license negotiation may also require that the user 
and the license server 24 determine a mutually acceptable payment 
instrument (a credit account, a debit account, a mailed... 

...license 16 have been rieCyotiated and acyreed to 
Z@ 4n 

-3 by both the license server 24 and user (step 71 5) . a di(rital 
license 1 6 is (Tenerated by 
Z.- tr 

the license server 24 (step 719), where such generated license 16 is 
based at least in part on... 
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...receive in the license request 
(i.e., (pu-bb (KD)) ; 

- a digital signature from the license server 24 (without any 
attached 

certificate) based on (kd (drl)) and (pu-bb (kd)) and encrypted 
with the license server 24 private key (i.e.. (S (pr-ls))); and 

- the certificate that the license server 24 obtained previously from 
the content server 22, such certificate indicatin!) that the license 
server 24 has the authority from the content server-22 to issue the 
license 16 (i . . . 

...user's computing device 14 may become irretrievably lost. Accordingly, 
it is preferable that the license server 24 maintain a database 50 of 
issued licenses 16 (Fig. 1), and that such license server 24 provide 
a user with a copy or re-issue (hereinafter 're-issue') of an... 

. . .Black box 30 

As was discussed above, as part of the function ol'acquiring a license 
16, the license server 24 may deny a request for a license 16 from 
...Such 'lite' black box 30 is then upgraded to a unique regular version 
prior to rendering a piece of digital content 12. as should be 
understood, if each black box 30... 

...the drm system 32 at any time, such as for example a time when a 
license server 24 deems the black box 30 not current, as was discussed 
above . 

Thereafter, the black... 

...acquisition function, is a proft-er or vouching mechanism from, the 
certifying authority that a license server 24 should trust the black 
box 3 )0. Of course, the license server 24 must trust the certifying 
authority to such a certificate for a black box 30 that is in fact 
trustworthy, it may be the case, in fact, that the license server 24 
does not trust a particular ccrtifyiii(y aUtllOl-ity. and refuses to 
honor any... is not intended for such other computing device 14, and does 
not allow aiiv requested rendering to proceed on such other computing 
device 14. 

Once the new black box 30 is... 
...with a license acquisition function or with any other function. 
5 drm system 32 - content Rendering , Part 3 

Referring now to Fig. 513, and assuming, now, that the license evaluator 
' )6... 

...least one of such valid licenses 16 provides the user with the rights 
necessary to render the corresponding digital content 12 in the manner 
sought (i.e., is enabling), the license... 

...36 then selects one of such licenses 16 for further use (step 519). 
Specifically, to render the requested digital content 12, the license 
evaluator 36 and the black box 30 in... 

. ..ey (KD) for the digital 
content 12 and permission from the license evaluator 6 to render the 
digital content 12, control may be returned to the rendering 
application 34 (steps 525. 527). in one embodiment of the present 
invention, the renderin (T application 1 )4 then calls the DRM system 3 
)2 / black box 30 and directs... 

...12, and then the black box 30 returns the decrypted digital 
content 12 to the rendering application 
3 )4 for actual rendering (steps 5' )' ), 5' )5). The 
I 0 rendering application 34 may either send a portion of the encrypted 
digital content 12 or the... 

...12 without departing from the spirit and scope of the present invention. 

Preferably, when the rendering application 34 sends digital content 12 
1 5 to the black box 30 for decryption, the black box 30 and/or the drm 
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system 32 authenticates such rendering application 34 to ensure that it 
is in fact the same rendering application 34 that initially requested 
the DRM system 3 )2 to run (step 5* ) 1). 

otherwise, the potential exists that rendering approval may be obtained 
improperly by basing the rendering request on one type of rendering 
application 34 and in fact rendenngwithanothertypeof renderin 
(lapplication')4. Assuiningthe authentication is successful and the 
digital content 12 is decrypted by the black box 3)0. the rendering 
application 3 )4 may then render the decrypted digital content 122 
(steps 5' )3 ), 53 5)'. 

Sequence of Key Transactions 
Referring. . . 

..Mainly, in such sequence, the DRM system 32 obtains the decryption key 
(KD) from the license 16, uses inforniatioii obtained from the , 
license 16 and the digital content 12 to authenticate or ensure the 
validitv of both, and then determines whether the license 16 in fact 
provides the right to render the digital content 12 in the manner 
sought, if so, the dipital content 12 may be rendered , 
Bearing in mind that each license 16 for the digital content 12, as seen 
in... 

..30 public key (pu-bb) (i.e..(PU-BB (KD)); 

- the digital signature from the license server 24 based on (KD 

(DRL)) 

and (pu-bb (kd)) and encrypted with the license server 24 private key 
(i .e. , (S (pr-ls))); and 

- the certificate that the license server 24 obtained previously from 
the 

1 5 content server 22 (i.e., (CERT (PU-LS...to decrypt the digital 
content 12 without any further ado. However, and also importantly, the 
license server 24 trusts the black box 30 not to do so. Such trust was 
established at the time such license server 24 issued the license 
16 based on the certificate from the certifying authority vouching for 
the trustworthiness of such... 

. .PU-CS) to 

satisfy itself that the certificate is valid (step 1007). signiffing that 
the license server 24 that issued the license 16 had the authority 
from the content server 22 to... 
. .S (PR-LS)) from the license 16, the black box 30 

applies the newly obtained license server 24 public key (pu-l S) to 
satisfy itself that the license 16 is valid... 

..device 14 has the right based on the DRL 48 in the license 16 to render 
the corresponding digital content 12 in the manner sought (i.e., whether 
the drl 48. . . 

..corn uting device 14 has the right based on the 
p 

DRL 48 terms to render the corresponding digital content 12 in the 
manner sought, the license evaluator 3 6 informs the black box 1 ) 0 that 
such black box 1 ) 0 can render the corresponding digital content 12 
according to the decryption key (KD) . The black box 30... 

..and the license 1 6 are in the same forna as issued from the content 
server 22 and the license server 24. respectively. Accordin(ly. it 
difficult if not impossible to decrypt the digital content 12 by 
bNlpassing the license server 24, and also difficult if not 
impossible to alter and then decrypt the digital content... 

. .alternatelN7performed as follows. 

Rather than having a signature encrypted by the private key of the 
license server 16 (pr-ls), as is seen in Fig. 8, each license 16 has a 
signature. . . 

..The private root key (PR-R) is known only to a root entity, and a 
license server 24 can only issue licenses 16 if such license server 
24 has arranged with the root entity to issue licenses 16. 



05-Nov-OS 



40 



10:11 AM 



Ginger R . DeMille 
in particular, in such embodiment. 

I 0 1. the license server 24 provides its public key (pu-ls) to the 

root 

entity; 

2. the root entitv returns the license server public key (pu- i_s) to 
such 

license server 24 encrypted with the private root key (PR-R) (i.e., 
(CERT (pu-ls) S (PR-R))), and 

1 5 the license server 24 then issues a license 1 6 with a sianature 
encrypted with the license server private key (S (pr-ls)), and also 
attaches to the license the certificate from the... 

...PU-R) to the attached certificate (CERT 
(pu-ls) S (PR-R)) to obtain the license server public key (pu-ls)-, 
and 

2. applies the obtained license server public key (pu-ls) to the 
signature of the license 16 (S (PR-LS). 

importantly, it should be recognized that/ust as the root entitv (Tave 

the 

I t7 

license server 24 permission to issue licenses 16 by providing the 
certificate (CERT 
t7 

(pu-ls) s (pr-r)) to such license server 24. such license server 
24 can provide a similar certificate to a second license server 24 

(i.e.. (CERT (l'U-LS2) S (PR-LS 1)). 

thereby allowing the second license server to also issue llceilses 1 
6. as should now be evident, a license 16 issued by the second license 
server would include a first certificate (CERT (pu-lsi) S (PR-R)) and a 
second certificate... 

...entity may periodically change the private root key (PR-R), thereby 
likewise periodically requiring each license server 24 to obtain a 
new certificate I 0 (CERT (PU-LS) S (PR-R)). importantly, as a 
requirement for obtaining such new certificate, each license server 
may be required to upgrade itself As with the black box 30, if a license 

server 24 is relatively current, i.e.. has been upgraded relatively 
recently, it is less likely that license server 24 has been 
successfully attacked. 

Accordingly, as a matter of trust, each license server 24 is 
preferably required to be upgraded periodically via an appropriate 
upgrade trigger mechanism such... 

...rights description or terms of a license 16 to determine if such DRL 48 
allows rendering of a corresponding piece of digital content 12 in the 
manner sought, in one embodiment .. .if available; 
activating a license 16, if available; and/or 
performing license acquisition from a license server 24. 

CONCLUSION 

The programming necessary to effectuate ...invention 
1 5 comprises a new and useful enforcement architecture 10 that allows 
the controlled rendering or playing of arbitrary forms of digital 
content 12. where such control is flexible and... 
...owner of such digital content 12. Also, the present invention comprises 
a new useful controlled rendering environment that renders digital 
content 12 only as specified by the content mvner. even thouah the 
digital content 12 is to be rendered on a computing device 14 which is 
not under the control of the content owner... 

Claim 

I a' method for renderino dloital content 
in an encrypted 

rights-protected form, the method comprising: 

determining, by a rendering application, that the digital content is in 
the 

encrypted rights-protected form, 

invoking, by the rendering application, a Digital Rights Management 
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(DRM) system, the DRM system including a license store having... 

...drm system, each license in the license store 
corresponding to the digital content to be rendered ; 
selecting, by the drm system, one of the located licenses; 
obtaining, by the DRM system... 

. . . KD) ; and 

1 5 returning, by the DRM system, the decrypted digital content to the 
rendering application for actual rendering . 

2 The method of clairri I wherein the DRM system further 
includes a public key... 

...of claim I furtlier comprising, after 

ZD 

invoking the DRM system: 

firstly calling, by the renderina application, the drm sN,-stem. and 
ceding, by the rendering application, control to the drm S@7Steni . 

4 The method of claim 3) further comprising... 

...before decrypting the digital content with (KD) : 

returning, by the DRM system, control to the rendering application; 
secondly calling, by the rendering application, the drm system to 
t) r-l 

decrypt the encrypted digital content 1 , and 

authenticating, by the DRM system, the rendering application. 

5 The method of claim 4 wherein firstly calling the drm 

system includes passing, by the rendering application, a first 
identification of such rendering application to the DRM system, wherein 
secondly calling the drm system includes passing, by the rendering 
application, a second identification of such rendering application to 
the drm system, and wherein authenticating the rendering application 
includes verifying that the first identification is the same as second 5 
identification. 

6 The method of clalin I further comprising 

authenticating, by the drm system, the rendering application. 

7 The method of claim I wherein selecting one of the 

licenses comprises... 

...claim 9 wherein the acquiring of the 
license comprises acquiring the license from a remote license server 
by way of a communications network. 

IL The method of claim 7 wherein the digital content is 
sought to be rendered in a particular manner, and wherein selecting one 
of the licenses I 0 further comprises determining whether each valid 
corresponding license provides the right to render the digital content 
in the manner sought. 

12 The method of claim I I further comprising passing, by 

the rendering application, the particular manner that the digital 

content is sought to be rendered to the drm system. 

I @ 

1 5 The method of claim I I further con... 

...claim 13 wherein the acquiring of the 
license comprises acquiring the license from a remote license server 
by way of a communications network. 

15 The method of claim I further comprising, after 
t) 

invoking the DRM system, calling, by the rendering application, the drm 
system to 
:n t® 

decrypt the encrypted digital content. 

16 Th.e. . . 

...wherein locating each license in 
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the license store corresponding to the digital content to be rendered 
comprises acquiring, by the DRM system, a license corresponding to the 
digital content from a... 

..claim 16 wherein the acquiring of the 

license comprises acquiring the license from a remote license server 
by way of a communications network. 

18 The method of claim I wherein the digital... 

..the license store having the content ID of the digital content. 

19 A method for renderinu diaital content in an encrypted 
rights-protected form, the method comprisirl": 
determining that the digital... 

..content, locating each license in the license store corresponding to the 
digital 

content to be rendered ; 

selecting one of the located licenses : 

obtaining (kd) from the selected license : 
decrypting the digital content with (KD) : and 

returning the decrypted digital content to the rendering application 
for 

actual rendering . 

20 ...valid comprises examining the digital signature.^ 

2 3. The method of claim 21 further comprising acquiring a 
valid license corresponding to the digital content from a license 
source if no valid license is found, placing the acquired license... 
..23 NN-liereM the acquiring of the 

license comprises acquiring the license from a remote license server 
by way of a communications network. 

25 The method of claim 21 wherel n the... 
..the digital content in the manner sought. 

26 The method of claim 25 further comprising acquiring a 
rights-providing license corresponding to the digital content from a 
license source if no such rights-providing license is found, placing the 

..claim 26 wherein the acquiring of the 

license comprises acquiring the license from a remote license server 
by way of a I 0 communications network. 

28 The method of claim 19 wherein locating each license 
in the license store corresponding to the digital content to be 
rendered comprises acquiring a license corresponding to the digital 
content from a license source if no such license is found in the license 
store. . . 

..claim 28 wherein the acquiring of the 

license comprises acquiring the license from a remote license server 

by way of a communications network. 0. 

The method of claim 19 wherein the digital... 

..Content-Key Database 
20 

Content ID 
Key ID 
Key (kd) 
License Data 

pu-ls, e Server 24 License 16 w/(kd) user's cc 
PR-LS Devic 

issued License Architecture 10 .. @ack box... 

..CS) S (PR-CS) CERT (PU-LS) S (P 
Fig. 3 Fig. 8 
/12 ' 
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... I 0 As with the authoring too] 18 and the content server 22, the 
license 

server 24 is implemented on an appropriate computer, processor, or 
other computing machine by way of... 
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...22 may reside on a sinqle computer, processor, or other computing 
machine together with the license server 24, each in a separate work 
space. 

in one embodiment of the present invention, prior to issuance of a 
license 16, the license server 24 and the content server 22 enter 
into an agency agreement or the like, wherein the license server 24 
in effiect agrees to be the licensing authority for at least a portion of 



...one content server 22 may enter into an aoency agreement or the like 
with several license servers 224. and/or one license server 24 
may enter into an agency agreement or the like with several content 
servers 2".). all without departing from the spirit and scope of the 
present invention. 

Preferably, the license server 24 can show to the world that it does 
in 

fact have the authority to... 

...2 distributed by the content server 22. To do so, it is preferable that 
the license server 24 send to the content server 22 the license 
server 24 public key (pu-LS). and that the content server 22 then send 
to the license server 24 a diaital certificate containing pu-ls as 
the contents signed by the content server... 

...with a piece of digital content 
12, and as part of the licensing function, the license server 24 must 
have access to the I 0 decryption key (kd) for such digital content 12. 
Accordingly, it is preferable that license server 24 have access to 
the content-key database 20 that has the decryption key (KD... 

...will be explained in more detail below. 

as with the authoring tool 18, the content server 22. and the license 

server 24, the black box server 26 is implemented on an appropriate 
computer, processor, or other... 
...detailed discussion in the present disclosure. Moreover, in one 
embodiment of the present invention the license server 24, the 
authoring tool 18, and/or the content server 22 niav reside on ai.e. that 
the digital content 12 will not be rendered unless the user obtains a 
license 16 that permits the rendering in the manner sought. Preferably, 
then, the user's computing device 14 must provide a... 

...322 that can satisfy to the content owner that such computing device 14 
will not render the digital content 12 except according to the license 
rules embodied in the license 1... 

...that is enabled when a user requests that a piece of digital content 12 
be rendered , that determines whether the user has a license 1 6 to 
render the digital content 12 in the manner sought, that effectuates 
obtaining such a license 16... 

...content 12 according to the license 16, and that decrypts the digital 
content 12 foi- rendering purposes if in fact the user has such right 
according to such I i cense 16... 

...functions with the 
architecture 10 disclosed herein: (1) content acquisition, (2) license 
acquisition, (3) content rendering , and (4) black box 30 installation / 
update, Preferably, any of the functions can be performed... 

...stored in a mariner such that the obtained digital content 12 is 
accessible by a rendering application 3 )4 (to be described below) 
running on the computing device 14, and by... 

...easily acquired as any other data file. 

However, the drm system 32 and/or the renderin (T application 34 may 
include an interface (not shown) designed to assist the user in... 

...known to be sources of digital content 12, and the like. 
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DRM system 32 - Content Rendering , Part I 

I 0 Referring now to Fig. 5a, in one embodiment of the present... 

...computing device 14 in the form of a stored file, the user will attempt 
to render the digital content 12 by executing some variation on a 
render command (step 501). For example, such render command may be 
embodied as a request to 'play 1 or 'open' the digital content 12... 

...on an icon representative of the digital content 12, of 
course, other embodiments of such render command may be employed 
without 

de arting from the spirit and scope of the present invention, in general, 

such render 

P 

command may be considered to be executed whenever a user directs that a 
file... 

...content 12 be opened, run, executed, and/or the like. 

importantly, and in addition, such render command may be embodied 
as a request to copy the digital content 12 to another... 

...an audio form, etc. as should be understood, the same digital content 12 
may be rendered in one form, such as on a computer screen, and then in 
another form, such as a printed document, in the present in vention. each 
type of rendering is performed only if the user has the right to do so. 
as Nvill be. . .computing device 14 can determine based on such extension 
to start a particular kind of rendering application 34. For example, if 
the file name extension indicates that the digital content 12 is a text 
file, the rendering application 3 )4 'is some form of word 
processor such as the "MICROSOFT WORD", distributed... 

...indicates that the digital content 12 is an audio, video, and/or 
multimedia file, the rendering application 3 )4 is some form of 
multimedia player, such as '.microsoft media player", also distributed by 
MICROSOFT Corporation of Redmond, Washington. 

0 Of course, other methods of determining a rendering application may 
be employed without departing from the spirit and scope of the present 
invention. . . 

. ..e., the aforementioned header information), where the meta-data includes 
information on the type of rendering application 34 necessary to 
render such digital 5 content 12. 

Preferably, such rendering application 34 examines the digital content 
12 associated with the file name and determines whether... 

...rights-protected form (steps 503. 505). if not protected, the digital 
content 12 may be rendered without further ado (step 507). u'protected, 
the rendering application 3 )4 determines from the encrypted digital 
content 12 that the DRM system 32 is necessary to play such digital 
content 12. Accordin(YlN% such rendering application 34 directs the 
user's computing device 14 to run the DRM system 32 thereon (step 509). 
Such rendering application 3 )4 then calls such DRM system 32 to 
decrypt the digital content 12... 

...in the valid license 16. Preferably, once the DRM system has been called 
by the rendering application 34. stich DRM system 32 assumes 
control from the rendering application 
3 )4. at I east for purposes of detern-iining whether 
the user has. . . 

...on the I 0 reviewed license rules whether the requesting user has the 
right to render the requested digital content 12 in the manner sought, 
among other things, as should be... 

...the DRM system 3 )2. In the present disclosure, to be 'trusted' means 
that the license server 24 (or any other trusting element) is 
satisfied that the trusted element will carry out... 

...the license evaluator 36 determines that a user does in fact have the 
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DIGITAL LICENSE AND METHOD FOR OBTAINING / PROVIDING 
A DIGITAL LICENSE 

CROSS-REFERENCE TO RELATED APPLICATIONS 

This application is a continuation of U.S. Patent Application... 

...architecture that allows access to encrypted digital content only in 
accordance with parameters specified by license rights acquired by a 
user of the digital content. 

BACKGROUND OF THE INVENTION 

Digital rights management and enforcement is highly desirable in 
connection. . . 

...board, an electronic network, the internet, etc. upon being received by 
the user, such user renders or "plays 1 the digital content with the aid 
of an appropriate rendering device such as a media player on a personal 
computer or the like. 

Typically, a... 

...A need exists, then, for providin( an enforcement architecture and 
method that allows the controlled rendering or playing of arbitrary 
forms of di ital 
L 

I t:l 9 
content, where. . . 

...the content owner of such digital content. A need also exists for 
providing a controlled rendering environment on a computing device such 
as a personal computer. Nflicrc the rerideringy erivi ronnient includes at 
least a portion of such enforcement architecture. Such controlled 
rendering environment allows that the digital content will only be 
rendered as specified by the 
I 

content owner, even though the digital content is to be rendered on a 

corn uting device 

p 

which is not under the control of the content... 
. . .1 

at the user's computing device or client machine. 

when a user attempts to render the digital content on a computing 
device, the rendering application invokes a Diorital Rights Management 
(DRM) system on such user*s computing device, if the user is attempting 
to render the digital content for the first time, the drm system either 
directs the user to a license server to obtain a license to 
render such digital content in the manner sought, or transparently 
obtains such license from such license ser 
-er without ariy action riecessarv on the part of the user... 

. . .and 

- a digital signature that ensures the integrity ofthe license. 

The user cannot decrypt and render the encrypted digital content 
without obtaining such a license from the license server . The 
obtained license is stored in a license store I 0 in the user's 
computing device. 

importantly, the license server only issues a license to a drm 
system 

that is 'trusted 1 (i.e., that can authenticate itself). To implement... 
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..as provided by an approved certifying authority. The public key is made 
available to the license server for purposes of encrypting portions 
of the issued license, thereby binding such license to such... 

..a black box server an updated secure black box when the user first 
requests a license . The black box server provides the updated black 
box, along with a unique public/private key pair, such updated... 

..the client machine sends the black box public key, version number, and 
signature to the license server , and such license server issues a 

license only if the version number is current and the signature is 
valid. A license request... 

..a key ID that identifies the decryption key associated with the 
requested digital content. The license server uses the black box 
public key to encrypt the decryption keN and tile decryption key... 

..the downloaded license has becii stored M the DRM system 
license store, the user can render the dialtal content accordino to 
tile rights conferred by the license and specified in the license terms, 
when a request is made to render the digital content, the black box is 
caused to decrypt the decryption key and license... 

..the requestor is allowed to play such content. The decrypted content is 
provided 

to the rendering application for renderlilcy 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summarN as well as the following detailed description... 

..with the Digital Rights Management (DRN4) svstelll of the computing 
device of Fio. 4 to render content in accordance witli one embodiment 
of the present 
invention; 
Fig. 6 is a flow. . . 

..system of Fla. 4 to validate a license and a piece of digital content 
and render the content in accordance with one embodiment of the present 
invention; 

Fig. I I is... license rules that must be satisfied before such di2ital 
content 12 is allowed to be rendered on a user's computing device 14. 
Such license rules are embodied within a diclital .. .architecture 10 
includes an authorino tool 1 8. a content-kev database 20, a content 
server 22, a license server 24, and a black box server 26. as Nvell 
as the aforementioned user's computing... 

..information are primarily employed by the user and the user's computing 
device 14 to obtain a license 16 to render the digital content 
12. Accordingly, such accompanying instructions / rules / information may 
include an appropriately formatted license acquisition. . .or security 
issues. As discussed below, such issues are dealt with in connection with 
the license . server 24 and the relationship between such license 
server 24 and the user's computing device 14. in one embodiment of the 
present invention... 

..server 22 sending (KD (PU-CS) S (PR-CS)) to the 
authoring tool 18. 

architecture - License server 24 

Referring again to Fig. 1, in one embodiment of the present invention, 
the license server 24 perfonns ...transmitted license 16 includes 
the decryption key (kd) for decrypting the dialtal content 12. Such 
license server 24 and such functions will be explained in more detail 
below. 

Preferablv. and like the content server 1-2, the license server 24 
in the architecture 10 has a unique public / private key pair (PU-LS. PR 

..be explained in more detail below. 

as with the authorina tool 18 and the content server 22, the license 

server 24 is implemented on an appropriate computer, processor, or 
other computing machine by way of... 
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English Abstract 

...a computing device when a user requests that a protected piece of 
digital content be rendered by the computer device in a particular 
manner. The drm system has a license store... 

...determining based on such reviewed license rules whether such license 
enables the requesting user to render the requested digital content in 
the manner sought. The state store maintains state information 
corresponding. . . 

Detailed Description 

... architecture that allows access to encrypted digital content only in 
accordance with parameters specified by license rights acquired by a 
user of the digital content. 

BACKGROUND OF THE INVENTION 

Digital rights management and enforcement is highly desirable in 
connection. . . 

...board, an electronic network,, the internet, etc. Upon being received by 
the user, such user renders or 'plays' the digital content with the aid 
of an appropriate rendering device such as a media player on a personal 
computer or the like. 

Typically, a... 

...A need exists, then', for providing an enforcement architecture and 
method that allows the controlled rendering or playing of arbitrary 
forms of digital content, where such control is flexible and definable... 

...the content owner of such digital content. A need also exists for, 
providingi a controlled rendering environment on a computing device 
such as a personal computer, where the rendering environment includes 
at least a portion of such enforcement architecture. Such controlled 
rendering environment allows that the digital content will only be 
rendered as specified by the content owner, even though the digital 
content is to be rendered on a computing device which is not under the 
control of the content owner. 

Further. . . 

...license at the user's computing device or client machine. 



05-Nov-05 



77 



10:11 AM 



Ginger R . DeMille 



when a user attempts to render the digital content on a computing 
device, the rendering application invokes a Digital Rights Management ( 
drm) system on such user's computing device, if the user is attempting to 

render the digital content for the first time, the drm system either 
directs the user to a license server to obtain a license to 
render such digital content in the manner souglit. or transparently 
obtains such license from such license server without ariv action 
necessarv on the part of the user. The license includes. 

- a decryption. . . 
...a digital signature that ensures the integrity of the license. 

The user cannot decrypt and render the encrypted digital content 
without obtaining such a license from the license server . The 
obtained license is stored in a license store I 0 in the user's 
computing device. 

importantly, the license server only issues a license to a drm 
system 

that is 'trusted' (i.e., that can authenticate itself). To implement... 

...as provided by an approved certifying authority. The public key is made 
available to the license server for purposes of encrypting portions 
of the issued license, thereby binding such license to such... 

...a black box server an updated secure black box when the user first 
requests a license . The black box server provides the updated black 
box, along with a unique public/private key pair. Such updated... 

...the client machine sends the black box public key, version number, and 
signature to the license server , and such license server issues a 

license only if the version number is current and the signature is 
valid. A license request... 

...a key ID that identifies the decryption key associated with the 
requested digital content. The license server uses the black box 
public key to encrypt the decryption key, and the decryption key... 

...the downloaded license has been stored in the DRM system 
license store, the user can render the digital content according to the 
rights conferred by the license and specified in the license terms, when 
a request is made to render the digital content, the black box is 
caused to decrypt the decryption key and license... 

...the requestor is allowed to play such content. The decrypted content is 
provided to the rendering application for rendering . 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summary, as well as the following detailed description... 

...with the Digital Rights Management (DRM) system of the computing device 
of Fig. 4 to render content in accordance with one embodiment of the 
present 
invention; 
Fig. 6 is a flow. . . 

...system of Fig. 4 to validate a license and a piece of digital content 
and render the content in accordance with one embodiment of the present 
invention; 

Fig. II is... license rules that must be satisfied before such digital 
content 12 is allowed to be rendered on a user's computing device 14. 
Such license rules are embodied within a digital .. .architecture 10 
includes an authoring too] 1 8, a content-key database 20, a content 
server 22, a license server 24, and a black box server 26, as well 
as the aforementioned user's computing... 

...information are primarily employed by the user and the user's computing 
device 14 to obtain a license 16 to render the digital content 
12. Accordingly, such accompanying instructions / rules information may 
include an appropriately formatted licenseacquisition script... or 
security issues, as discussed below, such issues are dealt with in 
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Detailed Description 

... architecture that allows access to encrypted digital content only in 
accordance with parameters specified by license rights acquired by a 
user of the digital content. 

1 5 BACKGROUND OF THE INVENTION 

Digital rights management and enforcement is highly desirable... 

...board, an electronic network, the internet, etc. upon being received by 
the user, such user renders or 'plays' the digital content with the aid 
of an appropriate rendering device such as a media plaver on a personal 
computer or the like. 

Typically, a. . . 

...A need exists, then, for providing an enforcement architecture and 
method that allows the controlled rendering or playing of arbitrary 
forms of digital content, where such control is flexible and definable... 

...the content owner of such digital content. A need also exists for 
providing a controlled rendering environment on a computing device such 
as a personal con-iputer, where the rendering environment includes at 
least a portion of such enforcement architecture. Such controlled 
rendering environment allows that the digital content will only be 
rendered as specified by the content owner, even though the digital 
content is to be rendered on a computing device which is not under the 
control of the content owner. 
Further. . . 

...license at the user's computing device or client machine. 

when a user attempts to render the digital content on a computing 
device, the rendering application invokes a Digital Rights Management ( 
drm) system on such user's computing device, if the user is attempting to 

render the digital content for the first time, the drm system either 
directs the user to a license server to obtain a license to 
render such digital content in the manner sou(Tht. or transparently 
obtains 
zl 

such license from such license server without aiiv action necessary 
on the part of the user. The license includes. 

- a decryption. . . 

...digital signature that ensures the integrity of the license. 
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The user cam-iot decrypt and render the encrypted digital content 
without obtaining such a license from the license server . The 
obtained license is stored in a license store I 0 in the user's 
computing device. 

importantly, the license server only issues a license to a drm 
system 

that is 'trusted' (i.e., that can authenticate itself). To implement... 

...as provided by an approved certifying authority. The public key is made 
available to the license server for purposes of encrypting portions 
of the issued license, thereby binding such license to such... 

...a black box server an updated secure black box when the user first 
requests a license . The black box server provides the updated black 
box, along with a unique public/private key pair. Such updated... 

...client machine sends the black box public key, version ritin-iber, and 
signature to the license server . and such license server issues a 

license onlv if the version number is current and the signature is 
valid. A license request... 

...a key ID that identifies the decryption key associated with the 
requested digital content. The license server uses the black box 
public key to encrypt the decryption key. and the decryption key... 

...the downloaded license has been stored in the DRM system 
license store, the user can render the digital content according to the 
rights conferred by the license and specified in the license terms, when 
a request is inade to render the digital content, the black box is 
caused to decrypt the decryption key and license... 

...the requestor is allowed to play such content. The decrypted content is 
provided to the rendering application for rendering . 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summary, as well as the followina detailed description... 

...with the Digital Rights Management (DRM) system of the computing device 
of Fier. 4 to render content in accordance with one embodiment of the 
present 
t:l 

invention; 
Fig. 6 is. . . 

...system of Fig. 4 to validate a license and a piece of digital content 
and render the content in accordance with one embodiment of the present 
invention; 

Fig. I I is... license rules that must be satisfied before such digital 
content 12 is allowed to be rendered on a user@s computing device 14. 
Such license rules are embodied within a digital .. .the architecture 10 
includes an authoring tool 18. a content-key database 20, a content 
server 22, a license server 24, and a black box server 26. as well 
as the aforementioned user@s computing... 

...information are primarily employed by the user and the user's computing 
device 14 to obtain a license 16 to render the digital content 
12. Accordingly, such accompanying instructions / rules / information may 
include an appropriately formatted license acquisition. . .or security 
issues. As discussed below, such issues are dealt with in connection with 
the license server 24 and the relationship between such license 
server 24 and the user's computing device 14. in one embodiment of the 
present invention... 

...server 22 sending (KD (PU-CS) S (PR-CS)) to the 
authoring tool 18. 

architecture - License server 24 

Referring again to Fig. I . in one embodiment of the present invention, 
the license server 24 performs the functions of receiving a request 
nor a license 16 from a user... 
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Detailed Description 

... architecture that allows access to encrypted digital content only in 
accordance with parameters specified by license rights acquired by a 
user of the digital content. 

BACKGROUND OF THE INVENTION 

Digital rights management and enforcement is highly desirable in 
connection. . . 

...board, an electronic network, the internet, etc. Upon being received by 
the user, such user renders or 'plays' the digital content with the aid 
of an appropriate rendering device such as a media player on a personal 
computer or the like. 

Typically, a. . . 

...A need exists, then, for providing aii enforcement architecture and 
method that allows the controlled rendering or playing of arbitrary 
forms of digital content, where such control is flexible and definable... 

...the content owner of such digital content. A need also exists for 
providing a controlled rendering environment on a computing device such 
as a personal computer, where the rendering environment includes at 
least a portion of such enforcement architecture. Such controlled 
rendering environment allows that the digital content will only be 
rendered as specified by the content owner, even though the digital 
content is to be rendered on a computing device which is not under the 
control of the content owner. 

Further. . . 

...license at the user's computing device or client machine. 

when a user attempts to render the digital content on a computing 
device, the rendering application invokes a Digital Rights Management 
(DRM) system on such user's computing device. If the user is attempting 
to render the digital content for the first time, the drm system either 
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directs the user to a license server to obtain a license to 
render such digital content in the manner sought., or transparently 
obtains such license from such license server without any action 
necessary on the part of the user. The license includes. 

- a decryption. . . 

...a digital signature that ensures the integrity of the license. 
The user cannot decrypt and render the encrypted digital content 
without obtainino 1 0 such a license from the llicense server . The 
obtained license is stored in a license store in the user's computing 
device. 

importantly, the license server only issues a license to a drm 
system 

that is 'trusted 1 (i.e., that can authenticate itself), to implement... 

...as provided by an approved certifying authority. The public key is made 
available to the license server for purposes of encrypting portions 
of the issued license, thereby bindino such license to such... 

...a black box server an updated secure black box when the user first 
requests a license . The black box server provides the updated black 
box, along with a unique public/private key pair. Such updated... 

...the client machine sends the black box public key, version number, and 
signature to the license server , and such license server issues a 

license only if the version number is current and the signature is 
valid. A license request... 

...a key id that identifies the decryption key associated with the 
requested digital content. The license server uses the black box 
public key to encrypt the decryption key, and the decryption key... 

...the downloaded license has beeii stored in the DRM system 
license store, the user can render the digital content according to the 
rights conferred by the license and specified in the license terms, when 
a request is made to render the digital content, the black box is 
caused to decrypt the decryption key and license... 

...the requestor is allowed to play such content. The decrypted content is 
provided to the rendering application for rendering . 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summary, as well as the following detailed description... 

...with the Digital Rights Management (DRM) system of the computing device 
of Fig. 4 to render content in accordance with one en-lbodiment of the 
present 
invention; 
Fig. 6 is a . . . 

...system of Fig. 4 to validate a license and a piece of digital content 
and render the content in accordance with one embodiment of the present 
invention; 

Fig. I I is... license rules that must be satisfied before such digital 
content 12 is allowed to be rendered on a user s computing device 14. 
Such license rules are embodied within a digital .. .the architecture 10 
includes an authorinor tool 18, a content-kev database 20. a content 
server 22, a license server 24, and a black box server 26. as we] I 
as the aforementioned user's... 

...information are primarily employed by the user and the user's computing 
device 14 to obtain a license 16 to render the digital content 
12. Accordingly, such accompanying nstructions / rules information may 
include an appropriately formatted license acquisition. . .or security 
issues, as discussed below, such issues are dealt with in connection with 
the license server 24 and the relationship between such license 
server 24 and the user's computing device 14. hi one embodiment of the 
present invention... 

...server 22 sendino (kd (PU-CS) s (pr-CS)) to the 
authoring tool 18. 

architecture - License server 24 
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Referring again to Fig. 1,. in one embodiment of the present invention, 
the license server 24 performs the functions of receiving a request 
for a license 16 from a user... 

...transmitted license 16 includes the decryption key (KD) for decrypting 
the digital content 12. Such license server 24 and such functions 
will be explained in more detail below. 

Preferably, and like the content server 22, the license server 24 
in the architecture 10 has a unique public / private key pair (PU-LS. PR 



...in more detail below. 

I 0 As with the authoring tool 18 and the content server 22, the 
license 

server 24 is implemented on an appropriate computer, processor, or 
other computing machine by way of... 

...22 may reside on a single computer, processor, or other coniputing 
machine together with the license server 24, each in a separate work 
space. 

in one embodiment of the present invention, prior to issuance of a 
license 16, the license server 24 and the content server 212 enter 
into an agency agreement or the like, wherein the license server 24 
in effect agrees to be the licensing authority for at least a portion of 



...one content server 22 may enter into an apency agreement or the like 
with several license servers 24. and/or one license server 24 may 
enter into an agency agreement or the like with several content servers 
22, all without departing from the spirit and scope of the present 
invention. 

Preferably, the license server 24 can show to the world that it does 
in 

fact have the authority to... 

...12 distributed by the content server 22. To do so, it is preferable that 
the license server 24 send to the content server 22 the license 
server 24 public key (PU-LS), and that the content server 22 then send 
to the license server 24 a digital certificate containing pu-ls as 
the contents signed by the content server... 

. ..witti a piece of digital content 
12, and as part of the licensing function, the license server 24 
rriust have access to the I 0 decryption key (kd) for such dicrital 
content 12. Accordingly, it is preferable that license server 24 have 
access to the content-kev database 20 that has the decryption key (kd... 

...will be explained in more detail below. 

as with the authoring tool 18, the content server 22, and the license 

server 24, the black box server 26 is implemented on an appropriate 
computer, processor, or other... 

...detailed discussion in the present disclosure. Moreover, in one 
embodiment of the present invention the license server 24, the 
authoring tool 18, and/or the content server 22 may reside on a... such 
content owner, 1 5 i.e. that the digital content 12 will not be rendered 

unless the user obtains a license 16 that pen-nits the rendering in 
the manner sought. Preferably, then, the user's computing device 14 must 
provide a. . . 

...32 that can satisfy to the content owner that such computing device 14 
will not render the digital content 12 except according to the license 
rules embodied in the license 16... 

...that is enabled when a user requests that a piece of digital content 12 
be rendered , that determines whether the user has a license 16 to 
render the digital content 12 in the manner sought, that effectuates 
obtainino such a license 16... 
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...content 12 according to the license 16, and that decrypts the digital 
content 12 for rendering purposes if in fact the user has such right 
according to such license 16. The... 

...functions with the 
architecture 10 disclosed herein: (1) content acquisition. (2) license 
acquisition, (3) content rendering , and (4) black box 3 )0 installation 
/ update. Preferably, any of the functions can be... 

. . .stored in a manner 
such that the obtained digital content 12 is accessible by a rendering 
application 3 )4 (to be described below) running on the computing device 
14. and by. . . 

...easily acquired as any other data file. 

However, the drm system 32 and/or the rendering application 34 may 
include an interface (not shown) designed to assist the user in obtaining 



...known to be sources of digital content 12, and the like. 
drm system 32 - Content Rendering , Part I 

Referring now to Fig. 5a, in one embodiment of the present inverition, 
assuming. . . 

...computing device 14 in the form of a stored file, the user will attempt 
to render the digital content 12 by executing some variation on a 
render command (step 501). For example, such render command may be 
embodied as a request to 'play 1 or 'open 1 the digital content 12... 

...representative of the dig'tal content 12. Of 
9 p 

course, other embodiments of such render command may be employed 
without 

departing from the spirit and scope of the present invention, in general, 
such render command may be considered to be executed whenever a user 
directs that a file havino... 

...content 12 be opened, run, executed, and/or the like. 

importantly, and in addition, such render command may be embodied 
as a request to copy the digital content 12 to another... 

...an audio form, etc. as should be understood, the same dialtal content 12 
may be rendered in one form, such as on a computer screen, and then in 
another form, such as a printed document. In the present invention, each 
type of rendering is performed only if the user has the right to do so, 
as will be. . .computing device 14 can determine based on such extension to 
start a particular kind of rendering application 34. For example, if 
the file name extension indicates that the digital content 12 is a text 
file, the rendering application 34 is some form of word 
processor such as the "MICROSOFT WORD", distributed by... 

...indicates that the digital content 12 is an audio, video, and/or 
multimedia file, the rendering application 34 is some form of 
multimedia pi aver, such as "microsoft media player", also distributed by 
MICROSOFT corporation of Redmond. washinGton. 

I 0 Of course, other methods of determinina a rendering application may 
be employed without departing from the spirit and scope of the present 
invention. . . 

...e., the aforementioned header information), where the meta-data includes 
information on the type of rendering applicatioii 34 necessary to 
render such dioital 1 5 content 12. 

Preferably, such rendering application 3)4 examines the digital 
content 12 associated with the file name and determines... 

...rights-protected form (steps 503, 505). if not protected, the digital 
content 12 may be rendered without further ado (step 507). If 
protected, the rendering application 34 determines from the encrypted 
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Application 34 - 531 
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Fig. 5B 

Check License Store 38 for 
Corresponding Licenses 16 - 601 

IF - - 

Check... 

. .No ny gnature 
License 16 valid? -605 

Y " 

Ilr 

Check Each valid 
License 16 for 
Rendering ights 
607 

Acquire ny alid i ense 

License 16 Grants Rights? - 609 

y 

valid, Enabling 
License 16 
Fig. 6 
/12 

contact License Server 24 . 701 
Send License Request - 703 

License server 24 checks Request Signature - 705 
ErTor mo no g 
valid? 707 
Yes 

License Server 24 checks Black 
Box 30 version 709 
upgrade ersi() 

Black Box o No A ceptable... 



16/3.K/50 (Item 9 from file: 349) 

DIALOG(R) Fi 1 e 349:PCT FULLTEXT 

(c) 2005 wiPO/univentio. All rts. reserv. 

00556009 **lmage available** 

ON-LINE POSTAGE SYSTEM 

SYSTEME D'AFFRANCHISSEMENT EN LIGNE 

Patent Applicant/Assignee: 

STAMPS COM INC, 
inventor(s) : 

ananda Mohan, 

Patent and Priority information (country, Number, Date): 
Patent: WO 200019382 Al 20000406 (WO 0019382) 

Application: WO 99US22074 19990923 (PCT/WO US9922074) 

Priority Application: US 98163993 19980929 

Designated States: 

(Protection type is "patent" unless otherwise stated - for applications 
prior to 2004) 

AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CR CU CZ DE DK DM EE ES FI GB 
GD GE GH GM HR HU ID IL IN IS DP KE KG KP KR KZ LC LK LR LS LT LU LV MD 
MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ 
VN YU ZA ZW GH GM KE LS MW SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM 
AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF S3 CF CG CI CM 
GA GN GW ML MR NE SN TD TG 

Publication Language: English 

Full text word Count: 25709 

Full text Availability: 
Detailed Description 

Detailed Description 

is stored in a license token, and is sorted in a database controlled 
by a license server . To access a program, the license server 
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locates the correct license token for a software application and 
transmits the license token to a license library. The the license 
server . Thus, only a single application can be 

breached by unauthorized cracking of an encrypted appl i cation. . .the 
purchased amount of postage. 

indicium print/authentication/monitoring module 1307 authenticates the 
request and generates image information for printing a postal 
indicium for 

the purchased amount so that PSD server 1212... line printing 
applications. For 

example, the secure on-line printing system can have a server generate 

images of checks, tickets, coupons or certificates and transmit them to 
a user 

computer for printing. . .IBM Advantis Network 23600. IBM Advantis 
Network 23600 is utilized to deliver and process user license 
information 

communicated between server system 180 and the USPS central meter 
licensing system (CMLS) . citibank Lock Box System 23500. . .Service (USPS), 
in an embodiment of the 

invention, client software 100 allows a user to electronically apply 
for the meter license and obtain a license. The software enables the 
user to apply for a new meter license, update... 

.approval or rejection information. At step 2660 server 200 updates its 
database. At step 2670 server 

200 communicates the license information to client software 100. if the 
license is approved at step 2630 the user... be used for other secure 
server based client printing applications. For example, the server can 
generate images of checks, tickets, coupons,, or certificates and 
transmit them securely to a client for printing... 
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... may not necessarily have a rectangular shape, such as a sofa. Parts of 
the background image 55, not foreclosed by "solid" aspects of the item 
image 4, are "painted" to the exemplary sofa image object 25 in order to 
achieve the... the picture control buffer 138 to another picture control 
buffer 139 structured to process the composite image 137, such as 
with the BITBLT function, 
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I 0 as the subject item image 4. . .displaying the desired additional 
pertinent information. 

Substantially all available processes for modifying and manipulating item 
images 4 from local databases 13, as disclosed in the incorporated '944 

reference, are also supported. .. 1, being structured to accordingly 

respond to the association tag, generates and displays the control image 
27 with the slider portion 223 which, as aforesaid, enables the user to 

select any. . . 
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application program 46 is accomplished. 

Providing a database monitor 51 is preferred so that each OCX module 50 
need not continuously read the system tables 48 to detect when any 
changes are made. The database monitor 5 1, therefore, renders the 
system more efficient by notifying, each OCX module 50 when it is 
appropriate to read the system tables 48 and then to... 
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the container, means for rendering the work. 
9 

3. A method according to claim 2, wherein the step of integrating means 
for rendering the work further comprises the step of integrating, with 
the container, means for printing ...13 

4. A method according to claim 2, wherein the step of integrating means 
for rendering the work further comprises the step of integrating, with 
the container, means for copying the... 

...17 

5. A method according to claim 2, wherein the step of integrating means 
for rendering the work further comprises the step of integrating, with 
the container, means for viewing the... of the container through on-line 
communication comprises utilizing a file data stream s wherein rendering 

of the work is possible only after all data representative of the work 
is present. . . ■ 

...of the container through on-line communication comprises utilizing a 
continuous data 3 stream wherein rendering of the work is possible, in 
part, with concurrent arrival, at 4 the computer, of... is an authorized 
user, the step of verifying occurring before 6 the computer requests a 
license to the server . 
27 

8 98. A method according to claim 97, wherein the step of verifying 
includes. . .137. A system according to claim 136, further comprising (A) 
means for 

electronically transacting a license with the server , and (B) means 
for receiving, from the server, auxiliary permission to utilize the 
media. 
4. . . 
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... and entertainment to homes and businesses. The 
owners and marketers of this content include software 
developers , motion picture -and recording companies, publishers 
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of books, magazines, and newspapers, and information database 
providers. The popularization. . .of limited 

- 5 function rights protection mechanisms to protect their rights. 

Authorization passwords and protocols, license servers , 

"lock/unlock" distribution methods, and non-electronic 

contractual limitations imposed on users of shrink-wrapped. . .or other 

commercial rights related to, electronic information. 

vde can support "real" commerce in an electronic form, 

that is the progressive creation of commercial relationships that 

form, over time, a network. . .said extracted 

content, such as material authored by the 

extractor and/or content (for example, images , 

video, audio, and/or text) extracted from one or 

more other vde container objects for...c electronic legal contracts; 
C distribution of 'content" such as electronic printed matter, 
video, audio, images and computer program ; and 
C secure communication of private information such as 
medical records and... and/or other 

event indicates the possibility of tamperinq, SPU 500 may 
automatically destroy, or render . accessible without privileged 
intervention, one or more portions of sensitive information it 
stores, such as. . .svc. unload (void) 

This unload interface call is called by a IRPC manager 
732 during shutdown or resource reallocation of rights operating 
system 602. It permits a service to close any. ..an SPE 'Terminate 
interfaceDriver Call. 

SPE-terminate. interface (void) 

in the preferred embodiment, this function shuts down 

SPE Driver 736, clears all notification addresses, and terminates 

all outstanding requests between an SPE... 

...driver 736 should be performed by ROS 602 
when the operating system is starting to shut down . It may also 
be necessary to issue this call if an SPE 503 and ROS... Thus, SPE 503 
operating in a multi -tasking mode 

may have one or more tasks sleeping ." In the simplest form, this 
involves an active task that is currently processing, and another... 

...e.g., a control task under which the active task may be 
running) that is " sleeping " and is "swapped out" of active 
execution space. Kernel /dispatcher 522 may swap out tasks... 

. . .service interrupt queues 
588 to help it manage the "swap blocks". 

RUN queue 
SWAP queue 
SLEEP queue. 

Those tasks that are completely loaded in the execution space 
and are waiting for... 

...other than processor cycles or are not needed at 
the moment) are referenced in the SLEEP queue. 

Kernel/dispatcher task manager 576 may, for example, transition 
tasks between the ...329 

executes the task. Kernel /dispatcher 552 task manager 576 may 
transition tasks between the SLEEP queue and the "awake" (i.e., 
run or swap) queues as needed. 

When two or . . . 

...processing concurrently with other processing. For 
example, real-time feed processing might have to be shut down in 
order to audit budgets and meters associated with the monitoring 
process. 

- 331 

One way. . . 
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